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[Article by N. I. Chervyakov] 


[Text] Compuiers are increasingly used in control systems and processes, making the problem 
of their operating reliability an important one. It is impossible in principle to create 
absolutely reliable processor components. The processors must assure reliable functioning even 
with faults and failures in the equipment over a long period of time. This pro lem can be 
solved by fault-tolerant processors, capable of continuing to function even when various 
component failures occur. Fault-tolerant processors are two to three orders of magnitude 
more reliable than are ordinary processors‘. 


Extensive theoretical research and practical development has been conducted in the area 
of fault-tolerant processors both in our court and abroad. 


Actual fault-tolerant systems have been manufactured, including a number of multi- 
machine and multiprocessor ES and SM computer systems *, the ESS processors made by Bell 
Systems, Pluribus, Stratus—$2°, etc. 


Redundant fault-tolerant systems include systems with multiple redundancy, structural 
redundancy, hybrid redundancy and gradual degradation’. In systems with gradual 
degradation, tasks are executed using the remaining nondefective modules. 


Very promising for the generation of systems with gradual degradation is residue 
arithmetic, which supports parallel, modular processor structure and has allowed a new 
approach to the problems of creating a fault-tolerant nonpositional processor, functioning in a 
residual class system. 


As individual components fail, the system of residual classes allows temporary loss of 
certain functions of a task in process. The probability of failure to perform any of the basic 
functions in a fixed time interval serves as a good measure of the “viability” of a processor. 


Fault tolerance of processors is assured by introducing various forms of redundancy: 
Hardware, software and time. 


Let us study an rithm for implementing hardware redundancy in a system of residual 
classes. The digits of a nonpositional residue code are the least nonnegative residues of 


integers in mode p,(V,¢[I,n]). The operation of taking the remainder (residue) |X|.° is 
defined by the rule - 7€(T,n] ( ) |X|, 


¥XEZ:|xitoax- [2] (1) 


where Z is the set of integers. 





T..e full systenn of representatives is the full system of least nonnegative residues in mode 
p, and is represented by the symbol‘ 


|. * 10, Bp cees p,— 1). 


Problems of coding numbers are reduced to the coding of elements in a ring of residues, 
while the matching of ring operations in a ring of residues with the arithmetic operations 
represents the arithmetic of finite models. 


The advantage of nonpositional code is that it has the simplest structure with respect to 
circular operations of a ring | -| ,’. 


If p,, Py P, are pairs of mutually simple numbers, then P,=p,-py* ... *Dy 


Suppose X+Ye|- lp F then, based on the Chinese theorem of remainders assuming 
IX|p =a, IY 1p = Fr * obtain 


D——— la, +B, ip,-.-. ia, +B, 13), 
(2) 2 
IX- Yip (la, Bly. la, Bel. eere 1a, -B, I+). (2) 


We can see from this that the circular (modular) operations in a code are 
parallel, assuring independent and simultaneous p of all digits of the operands. 
Modular operations are the most important characteristics of nonpositional systems. In 
addition to modular operations, operations are also frequently performed which are positional 
in nature. As we know, a system of residual classes allows a significant (approximately ten 
times) increase in the speed of execution of such arithmetic operations as multiplication and 
addition. However, the implementation of nonmodular operations in a system of residual 
classes is quite difficult. The basic nonmodular operations are computation of positional 
—*— * ow and expansion of a system of bases, to which all other nonmodular operations 
can uced. 








Devices implementing nonmodular operations are subdivided into two classes: Convolution 
devices and positional converters» 


Convolution devices represent a significant portion of the hardware of a nonpositional 
—** * er are designed to convert numbers from positional systems of notation to systems 
resi asses. 


Conversion of a number to a — of residual classes can be performed by dividing the 
input number X in modulo p, The digits of the system of residual classes number are 
generated according to equation “(1). 











X = AN + eos + AN' + AN, (3) 
0g A;<N—!1, OIC XK, 


where N is the base of the system of notation. 


Using the apparatus of comparison t , the power of a base can be defined by the 
constant C;:C,=1, C,zN'modp , eeey Cyz -mod Py and then 


Xm (Aglgt vee FAC, + Aghe) Od Py = Xi, (4) 


The values of X, can be used to determine the remainder of division of X by p, If X, 
has more digits than py the coeficient of number X, should be multiplied by the constants 
<A; 


can be continued until a number X, is generated with a number of digits 
which is equal to or less than the number of digits of the modulus p, which will be a digit of 
in the selected modulus in the system of residual classes. 


| eet if X,=p, the residue (remainder) is equal to zero, if X,<p,» the residue 
apX, 


Thus, the input number is converted to another decimal number which is comparable to 
the initial number but has fewer digits, i.e., the length of the initial number is reduced. 


A device converting a binary number to a system of residual classes differs from other 
known devices in that it requires the minimum hardware’. In accordance with Horner’s 


equation, any binary number can be represented as 


X-. (Ags 2+ Agi 2+... +A) 2+ 4, = 
mm X, mod pj = a, mod pj, (5) 


X, mod p; + A, = X, mod p; = a; mod p). 











As the device operates, the contents of the input register, except for the low-order bit A, 
and the high-order bit Ay, are shifted to the left. A modulo p, adder is connected to the 
input of the high-order position. One peculiarity of this converter is that as the range of the 
numbers converted increases, the hardware costs increase only slightly. Thus, as the range is 
increased by 10° times, the hardware costs increase by a factor of approximately four. 


This device has been widely used among researchers studying the practical application of 
systems of residual classes, since it converts numbers very effectively. 


Considering the short length of numbers, a nonpositional processor arithmetic device can 
be miade as a set of tables to implement the basic modular operations. 
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The structure of a nonpositional processor is shown in the accompanying figure. The 
arithmetic device (AY,) can be made as individual paths equal in number to the number of 
bases, operating independently of each other and parallel in time, and formatted as normal 
elementary processors’. The need to perform nonpositional operations involving operations on 
an entire number requires that nonmodular processor AY, be included in the arithmetic 
device, consisting of a positional characteristics module, containing a memory buffer (bII 
BITX), plus a monitoring unit. The functions of the positional characteristics and monitoring 
units are: Determination of the sign of a number, comparison of numbers, division, rounding, 
determination of overflow, expansion of the system of bases, determination of the positional 
characteristics (rank, kernel) of the number and detection of errors. These functions must be 
performed to determine the position of numbers in the number range. 


Methods related to determination of positional characteristics, not introducing ambiguity 
to their determination, can be reduced to conversion of numbers from systems of residual 
classes to a generalized positional system of notation‘. Therefore, the positional 
characteristics unit includes a circuit to convert numbers from a system of residual classes to 
a positional system of notation (OIIC), the results of operation of which are used to determine 
the chsracteristics listed above. The positional characteristics can be determined sequentially 
with computation of the numbers in the positional system of notation. A system of residual 
classes-positional system of notation circuit is used to restore the numbers to the system of 


4 








residual classes. Some position characteristics such as the sign of a number or the number of 
the interval in which a number is located utilize the values of the high-order bit of a number 
represented in a positional system of notation. This follows from the mutually unambiguous 
agreement between numbers represented in the system of residual classes and positional 
system of notation’. Therefore, the number sign determination circuit (CO34) is included in 
the positional characteristics unit. 


An error in a code combination or overflow of the processor registers is also detected from 
the value of the high-order bit. This function is performed by the error detection and 
correction circuit (COMO). Expansion of the system of bases requires knowledge of the bits in 
an unexpanded base system. This function is performed by the base expansion circuit (CPO), 
which is also contained in the nonmodular arithmetic device. 


The functions of division, reduction of bases and rounding of numbers are performed by 
the number rounding circuit {CO4%). Comparison of numbers or determination of intervals 
within which numbers are located requires knowledge of all digits of a number represented in 
a positional system of notation. This function is performed by the number comparison circuit 
at a part of the positional characteristics unit. The positional characteristics of rank and 
kernel of a number are determined by the number rank determination circuit (COP4) on the 
basis of the values of the digits represented in the system of residual classes, and are used to 
detect and correct errors, expand the system of bases, for rounding, division and many other 
operations. The rank and kernel of a number make it relatively easy to implement nonmodu- 
lar operations. As was shown in * °, the rank and kernel can be calculated by means of 
modular operations. 


A necessary element in a nonpositional processor, as in a positional processor, is the 
processor memory unit, consisting of random-access memory (O3Y [RAM)) and read-only 
memory eel poe. RAM is used to store numbers, ROM — to store programs and 
certain numerical constants. 


The microprogram controller (MYY) stores microprograms for all operations and organizes 
the — of the entire processor by sending control signals to the basie hardware 
controller. 


The input-output device (YBB), consisting of a buffer input-output memory (BIIBB), and a 
unit for conversion of numbers from system of residual classes to positional system of notation 
and convolution of numbers (BC4), is included in a nonpositional processor for number input 
and output. 


The devices and modules of the processor are connected by an interface system. 


As we can see from the structural diagram of the nonpositional processor, the system of 
residual classes determines the specifics not only of the arithmetic device, but also of all other 
devices. It is basically reduced to subdivision of all processor hardware into individual 
independent channels, each of which corresponds to a given base of the system of residual 
classes, where the numbers, address portions of instructions and operation codes are all 
represented in the system of residual classes. 


The structure of the nonpositional processor not only supports execution of the operations 
required, but also implements the major advantage of the system of residual classes with 
parallel execution of operations. All of this allows full implementation of parallel access to 


5 











almost all processor units and allows development of a processor which does not have the 
shortcomings of classical computer structures. 


The major peculiarity of the structure of a nonpositional processor from the standpoint of 
reliability is the potential for —* of the processor after some of its units have failed. 
This allows operation to continue while red , within permissible limits, such quality 
characteristics as accuracy and speed. The capability of the processor structure to be tolerant 
of hardware and software faults allows the processor to operate in the gradual degradation 
mode. This property assures high viability of systems and is one of the major factors upon 
which the development of designs for fault-tolerant computer systems capable of gradual 
degradation is based. 


Fault tolerance of a nonpositional processor is based on one of the most important 
properties of systems of residual classes — the capability for variation of accuracy, speed and 
reliability. 


In contrast to a multiprocessor system, in this case the task is executed within a single 
nonpositional processor. 


The structure of the nonpositional processor consists of independent channels which react 
in different ways to faults and failures of the hardware and allow the nature and structure of 
expected errors to be determined in hardware or software. 


As an example of the functioning of a nonpositional processor which is resistant to failures 
in individual channels, let us analyze the computation of an integer polynomial in a system of 
residual classes. 


Suppose the bases of the system are: p,=3, p,=5, ps=7, ps=11, p,=13, p,=17; of these, 
P,P, are data, p, and p, are test. The operating range P=$-5-7-11=1155, the full range 
P’ =P. P.P =255255. The orthogonal bases of the system B,=170170, B,=51051, B,=145860, 
B,=46410, B,=157080, B,=195195. 


We must calculate the value of the integer polynomial where z=10: 


] ] 15 
— — xi — — gti — — 
f (x) 7 3x8 7* > * 1851. 


The polynomial is solved on a nonpositional processor with six independent channels 
corresponding to the selected bases of the system. The constants of the polynomial repre- 
sented in the system of residual classes are in ROM, the values of the variable — in RAM. 


Each action (raising to a power, conversion, multiplication) is performed in a single 
modular operation. 


The final result is obtained in four modular operations 


() = 38 — Bt 1851 = 








= (2, 4,1, 7, +4): 
3 


wi — 


Computation of the value of the polynomial requires extraction of one number from RAM, 
four from ROM, plus eleven modular operations in the arithmetic unit. 


If we assume that the RAM access time is equal to the time required to execute modular 
operations, computation of the polynomial requires 16 modular operations. 


Let us now analyze the reaction of a nonpositional processor to faults and failures in a 
certain portion of the equipment. Let us assume that when variable z is retrieved from local 
memory of elementary processors SII mod p, and SII mod p,, faults occur, for example, in 
two bits. After the fault in bases p, and Pas variable z is multiplied by a number which 
contains zero digits in the corresponding positions, the product produced is therefore accurate 
and it is passed on for further computation, and with no further faults an accurate end result 
is obtained. If the bits in local memory of each elementary processor are represented in 
binary code, in this example faults can occur in five bits, and the result of the operation will 
still be correct. 


Thus, the errors appearing as a result of faults are self corrected and normal functioning 
of the processor continues. correction of errors can occur not only with an individual 
fault, but also if several faults are superimposed in a given base. Self correction of errors 
eliminates second computation, doubling the effective throughput of the processor. 


We note that checking of intermediate results is undesirable; only the final results should 
be tested. 


The system of residual classes selected allows detection of double errors and correction of 
single errors. Errors may be either in the data or in the test bits. The final result is sent 
from the arithmetic unit through an interface into the buffer memory of the positional 
characteristics unit and then to the test unit. The value of the high-order bit of the number 
generated in the positional system of notation also flags errors, while the location of an 
erroneous bit is determined by the error detection and correction circuit by checking the 
correctness of projection of the number". An individual error is corrected at this point. 


We must note that, using the base expansion system, it is possible not only to detect, but 
also to correct errors in two tested bases. 


Let us assume that during computation of the final result, two channels fail in test 
moduli p, and p,. After location of the erroneous digits in the base expansion circuit, these 
errors are corrected. To correct the errors, zeros are written in the erroneous digits, then 
Az), 4, 1, 7, 0, 0). To restore the correct result, a method is used which is presented in 
work’. 


Even though two channels of the arithmetic unit fail during the process of executing the 
task (representing some 45% of the arithmetic unit hardware), the nonpositional process 
performs all functions with absolute reliability, though at lower speed — speed drops by a 
factor of 1.6. As individual elements or units fail, the throughput of the processor drops. If 
the number of operations involved in processing data is significantly greater than 10, the 
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throughput of the processor does not decrease by much and the processor operates correctly 
when individual components fail. 


The structure of a nonpositional processor can be designed to decrease degradatica upon 
failure and assure more reliable processor operation, without requiring more complex software 
or introduction of advitional hardware as is the case in traditional processors, while the 
correcting codes in a system of residual classes allow Cetection and correction of errors arising 
in all devices. Selection of the system of residual classes with the least base sixe increases the 
functional reliability of a nonpositional processor by relatively frequent self correction of 
errors, which is explained by the high probability of appearance of zeros in small base 
remainders. Furthermore, the throughput of the processor is retained with self correction. 
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—* — — spain sapeiiien. Oe eopete ye Finn 
manufacturing these ts. Improvements in solid-state technology and increasing levels of 
circuit integration have resulted in a significant increase in the cost of making changes and a 


tei.Jency toward development of methods allowing detection of errors in the planning stage. 


Modeling is most widely used to check circuit decisions. In the early stages of 
modeling supports detection of errors, but in the later stages certain errors may 
undetected. The most serious problem is that modeling does not guarantee complete agreement 
between a circuit and its cations; in other words, it does not guarantee full verification of 
a circuit decision. 


The creation of parallel systems has complicated the problem of verification. The number 
of states in such systems increases exponentiaily with the number of processors in comparison to 
a single-processor system. Furthermore, errors may occur in the planning stage which are 
characteristic of multiprocessor systems: Dead-end situations, from which the system cannot 
escape, incorrect system functioning. In general the sequence of execution of parallel processes is 
not rigidly fixed, i.e., the time at which a certain process starts relative to other processes may 
vary. 


Relationships of partial are more formally fixed in a set of parallel processes. A 
given task may be executed by t sequences of parallel processes'*. This leads to 
additional difficulty in verification of circuit and architecture decisions for parallel systems. 


A similar situation also arises in the creation of software. Full verification of programs by 
testing becomes practically impossible due to the tremendous number of states arising as the 
software runs. Program testing may quite effectively demonstrate the presence of errors, but 
unfortunately it cannot prove tneir absence‘. This thesis has also become correct for hardware 
decisions as the degree of integration of elements and complexity of systems have increased. 


The way out of this situation is to prove the correctness of circuit operation, in other words 
formal verification. 


Programs reached a level of complexity at which testing could not provide an acceptable 
level of verification before hardware did. This explains the presence of a significant number of 
publications on program verification’. There have been fewer publications in the area of 
verification of circuit and architecture decisions. 

































































However, the problem of verification of circuit and architecture decisions is now more acute 
than the problem of verification of software, due to the tremendous cost of correcting hardware 
errors. Software developers can permit the publication of incompletely verified programs, since 
— — —— Hardware developers, who do 
a rl tc de NEED glo 5 gts for formal verification with increasing 


Petrie networks. Computer hardware can be analyzed at several levels. At one 
computer consists of simple memory devices and valves. At a higher level, the basic system 
components are functional units and registers. At a still higher entire computers may be 
components of computer networks. One of the major properties of Petrie networks is their 
ability to model each of these levels. However, in addition to modeling, we must also analyze 
the system modeled. 


The most important tasks performed for Petrie networks are establishment of their safety 
and activity’. Safety is a property guaran ee re eee 8 eae 
network is safe if the number of connectors in it not exceed a fixed integer & Safety allows 

















hardware is limited in terms of the maximum number it can contain). Activity of a network 
means that there are no dead eads. The task of analyzing Petrie networks is insolvable in the 
general case. Solutions have been found for certain subclasses of networks, and it is these 
networks which are most frequently used to verify hardware devices. 


The problem of verifying circuit and architecture decisions based on Petrie networks has 
been the subject of publications’*. 


Work * suggests a cellular structure for implementation of asynchronous control circuits. 


Cellular structures are usually not used to implement asynchronous circuits, since signal delays 
in cells make it more difficult to assure correct functioning. 


The correctness of functioning is checked by means of a marked graph, in which sequences 
of circuit correspond to sequences of excitation of transitions. Marked are & 
solvable su of Petrie networks. The correct functioning of a circuit is assured if its marked 
graph meets the conditions of activity and safety. > ae re, 2 Cee 5 em eee 
contains at least one starting marker®. A marked graph is safe if each line contains no more 
than one marker in any state which can be reached from the initial state. 


A safe marked graph can be implemented by replacing positions with Muller C circuits, 
initial markers with inverters. Figure 1 shows a marked graph (a) and its implementation (6). 
Work ' describes a method of implementing a control circuit marked graph in a cellular 
structure. 


Let us study a circuit for the control of parallel operations (Figure 2a). A pair of 
operations is started in response to the “query” signal on line 1, which evokes the “query” signal 
2 and 3, which actually start two operations. The completion of each operation 
reported by the “response” signal. The “response” signals on lines 2 and 9 evoke the “ 
signal on line 1. We note that the second “query” signal may be fed to the control circuit before 
completion of operations performed in response to the first query. But operations are 
restarted until they are completed, i.e., until the “response” signals are generated for 
start. The operation of this circuit is modeled by a marked graph (Figure 26), which has the 
properties of activity and safety. Consequently, the hardware implementation of the graph by 








the method of ’ guarantees correct functioning of the control circuit. 
This verification method is in nature. First a Petrie network is generated modeling 
the operation of the circuit. network must satisfy the conditions of activity and safety. 


Then the network is used to develop a circuit. Works’~ differ basically in the methods used to 
construct Petrie networks and implement them. Other applications of Petrie networks are 
discussed in review". 


Predicate calculus. Yet another aspect of the verification of circuit and architecture 


million years, with routine maintenance each 10 flight hours. This extremely high circuit 
ty 


generates , 
reliability verification is based on extrapolation of a certain of observations. In the case of 
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Such a system retains its functionality with thousands of faulty elements. Consequently, 
verification by intentionally introducing is also unpromising. It was in “ that 
it be proven that a system satisfies the necessary requirements, even though this eliminates field 


testing. 


A detailed description of a system allows more direct conditions to be used, but it is 
difficult to guarantee that a low-level description assigns the required properties. 


A higher level description is required if we postulate the general properties of the system by 
a method which can be understood easily by man. This —* up the problem of transition from 
the high-level description to a detailed system description. In order for the high-level 
description to correspond to the actual system, we must formulate not a single description, but 
rather a hierarchy of descriptions. Each level in the hierarchy describes the properties of the 
system in terms of predicates and logical functions. Each level of description can be looked upon 
as an abstraction from the previous level. In order to test the agreement among the descriptions 
at various levels, it must be proven that any property of a higher level description is correct also 
for a lower level description. 


The hi level of description represents the system requirements, with no information 
concerning the methods of their implementation. As we move downward through the levels of 
descriptions, additional mechanisms arise allowing incorporation of more detail concerning 


system operation. 


In "| the verification — m— is illustrated on the example of fault-tolerant computer 
systems implemented in software. Fault-tolerant computer systems are created by multiple 
duplication of processors, the results of computation are determined by voting. The difference 
between systems implemented in software and in hardware is that the v , which is used to 
reveal and mask off processors which have failed, is implemented in ware. The term 
“implemented in software” may create the impression that we are discussing verification of 
programs which contain errors, but this is not the case. The software facilities for guaranteeing 
fault tolerance require special hardware and are so closely interrelated that shortcomings in one 
of the components reduce system reliability. The methodulogy suggested for verification actually 
tests the sufficiency of both components. 


A model of the highest level of system fault tolerance consists of axioms expressing 
limitations as to the order of iteration of various tasks and requirements fo" assurance of safety. 
The main axiom is formulated as follows: 1) In each iteration, task a is started and must be 
safe; 2) each task 6, supporting an input of a, provides a single value in each iteration. In 
predicate calculus, the main axiom is as follows 


a on during 4 A task @ safe during i A 
AV 6 € inputs (a) | result (b)|=1, 


where a on during i is a predicate which is true if task a is started during iteration ¢ task a safe 
i is a predicate which is true if task a generates only one output result during iteration i 
inputs (a) is the set of tasks preparing information for a; result (b) is the result of task b. 


The second, more detailed level of description postulates the properties of the voting 
mechanism and the reconfiguration which occurs when a failed processor is detected. 
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At the third level of description, the properties of individual system processors are 
introduced. Each processor has a local clock, communications interface and buffers. Here also 
the chronism of the processors and its influence on their interaction must be described. 

fourth level describes the portion of the fault-tolerant system which is implemented in 
software in terms of pre- and post-conditions. 


The correctness of the highest-level axioms must be proven at all description levels. 


This methodology was used to v the architectural decisions in a system consisting of 
eight BDX-930 processors. The formal verification process revealed planning errors which it 
would have been difficult, if not impossible, to detect in the testing stage. For example, it was 
proven that three independent clocks were insufficient for fault-tolerant synchronization. It was 
also discovered that transient faults could result in accumulation of computation errors. 


It is interesting that verification of the second description level required some 22 proofs, 
verification of the fourth level required 17 proofs. It would have been virtually impossible to 
perform this task without automation of the proofs. The authors used a program for automatic 
construction of proofs in multivariate first-order logic. 


Predicate calculus is also used to describe sequential circuits '?. 










































































A )-calculus is suggested in ™ for verification of circuits, which is also a variety of logical 
conclusion systems. 


Temporal logic. One of the first attempts to use temporal logic for description of circuits 
was the development of vector-swiiching functions‘. In addition to the ordinary boolean 
operations, vector-switching functions utilize operations on time intervals. These operations 
include delay, storage, and addition with storage. 


A temporal logic is in “ which is an expansion of traditional logic and predicate 
calculus, for verification of hardware modules. It is shown that temporal logic is just as 
applicable to description of memory as to determination of the properties of safety and activity 
of processors represented by active circuits. 








If statements in predicate calculus define the status of a system at a certain moment in 
time, called the current moment in time, temporal logic suggests that all possible sequences of 
states to which a system can evolve from the current state be defined. Let us present some 


typical temporal operators. 


The “from this time” operator 0 — the expression JA means that statement A is true at 
the present time and throughout the future. For example, the statement B+0A means: 
“Whenever B is true at a certain moment in time, A is also true and will remain true forever.” 


The “possibly” operator V — the expression YA means that statement A will be true in a 
certain future, possibly at the present, but will not necessarily remain true. For example, the 
expression B4VA means that “if B is true, then A may become true.” This operator is usually 
used to describe the possible response of a module to a certain query. 


The “next” operator — the expression B next A means that if B is true at the current 
moment, A will be true at the next moment in time. This introduces the concept of discrete 
time. It is important to note that the use of the next operator is a result of idealization. It is 
assumed that transitions are shorter than the intervals assigned by the next operator. 


The “while” operator — the expression A while B means that A is true at the current 
moment, since B is true at the current moment, and will remain true so long as B remains true. 


The facilities of traditional logic are sufficient for description of combination circuits. 
Memory elements have two aspects — the setting of a new value and its preservation. These 
two aspects can be described partially by a certain function and the while statement. 


If combination circuits and memory elements can be considered passive components, 
processes refer to those components of a system which cause changes in its status. The 
properties of processes are frequently classified in two ways: By safe statements and active 
statements. Safe statements describe properties which are performed at any moment in time 
(i.e., in variant statements) and properties determining the possible sequence of events. 


Active statements describe properties which bring about certain methods of changing of 
states, corresponding to the desired behavior of a system. 


The use of temporal logic is illustrated on the example of construction of an arbiter circuit, 
which defines the sequence of operation of two users with a shared resource (Figure 3). The 
arbiter interacts with the other modules by means of five pairs of circuits. The pairs (ur,, ua,) 
and (ur,, ua.) are used by modules U, and U, to request access to the resource. When the 
arbiter permits access by one of the users, information is transmitted between the user and the 
resource through the corresponding pair (tr,, ta,) or (tr,, ta,). When transmission is completed, 
the arbiter sends a request to the resource over the pair (sr, sa). After an answer is received, a 
new operating cycle can be started. 


The sequence >f appearance of signals in the circuits is as follows: 


(r=z)9(r=z) while (a=, z) 
av, r. 


The statement ,(tr,Atr,) describes mutually exclusive signals. The statement ur,>ur, while 
, 8a, 1, 2 means that a transmission request remains active until a confirmation is received 
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from the resource. The full system of statements describing the behavior of the arbiter will not 
be presented here. 


Verification of circuit decisions consist of proof that the system of statements describing the 
arbiter can be derived from the statements describing the operation of the submodules of which 
the arbiter is made, considering the interconnections among submodules. In the proof process, 
the resultant statements are tested for activity and safety; testing for activity and safety is 
performed by introducing additional statements to the system describing the planned object and 
testing the derivation of these statements. For example, the statement assigning the property of 
activity is as follows 


ur aV(trAsr), =1, 2. 


This statement means that after a request of module i, the request may be serviced: 
Parameters are transmitted from module i and a request is made for the resource. 


The use of temporal logic to verify circuits is also the subject of  *, 


Conclusions. Two trends can be distinguished in methods for formal verification of circuit 
and architecture decisions. 


First trend — the planned circuit (architecture) is described by a model with known 
properties or the model is converted to a form satisfying certain limitations, which in turn 
provides known model properties. The most popular formal verification criteria are activity and 
safety of models developed. A circuit implementation of the models developed is then 
constructed. This trend includes planning with the use of various subclasses of Petrie networks 
(marked graphs, diographs, etc. ). 


Second trend — no limitations are placed on the construction of the model. The model is 
formulated in terms of predicate calculus or temporal logic. The properties of activity and 
safety are formulated as statements in the corresponding language. Formal verification consists 
of proof of the statements of safety and activity. 

The first trend provides simple verification, but is not applicable to all systems. 

The second trend may require significant effort to provide a proof, but is universal. 

The problems of verification of software and hardware have a great deal in common. 
Attempts have frequently been made to transfer the methods developed for sofiware to 
hardware, since software verification has deeper traditions. 


The methods of formal verification developed to date are quite cumbersome. Their 
application is therefore more justified for hardware due to the great cost of errors in hardware. 


The use of facilities for automating proof is growing in its significance. 
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[‘vext] Imtroduction. The flow of scientific and technical information which can be represented 
as alphanumeric text, plans, dra , etc. has significantly grown in recent years. This has 


greatly increased the requirements which must be placed on timeliness of processing, as well as 
information storage and retrieval structures and facilities. 


One of the most promising answers to the problem of storing and reprod text and 
graphic information is the use of holographic methods. The — — method 
prog Figg a gyesnd anwar Mae «age sam, Dronger , intelligent redundancy and high 
storage ty with comparatively easy automation all st — from to 
reproduction. The holographic method of st and reproduction of information allows rapid, 
noncontact reading, search for and page-level «election of information. It is also quite important 
that holographic methods allow recording, storage and reproduction of information as mays, 


drawings, diagrams, etc. without requiring any preliminary processing, as is required by memory 
devices using magnetic media" ?. 


Thus, the holographic method of information storage is quite promising and its use can 
i:uprove information processing. 


ra sy Ragen Ban ga cenlggnene ee Figure 1 shows an automated disk 
hol e system for recording, storage, retrieval and reproduction of information developed by 
the Institute of Nuclear Physics, USSR Academy of Sciences, and introduced in a 


number of organizations’. 


The system includes the following elements: An information encoder, designed to create in 
computer memory a catalog of documents stored on the holographic disk; an automatic 
holographic disk recorder; an information machine, required to reproduce documents. 


The basis of holographic memory is a matrix filled with Fourier holograms. It is a glass 
disk covered with a high-resolution photographic emulsion. Fourier holograms are located on 
the matrix in concentric circles. The capacity of the matrix is 10076 holograms 2.2 mm in 
diameter, each of which represents a page of text and graphic information. 


Information to be stored on the holographic disk must have good contrast and be easily 
read under normal illumination. The information is transferred from paper to microfilm with a 
type AKM-22 camera and is sent on to the inspection equipment where its quality is checked 
and the documents are indexed (cf. Figure 1). Each imaged document is assigned a search 
pattern which is entered by the operator and stored in the holographic disk catalog, which is 
stored in the memory of an SM-4 computer. The search pattern is related to the nature of the 
information in the document and reflects its essence. 
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After collection, checking and classification, the microfilms are sent to the automatic 
holographic disk recorder. The positioning of the matrix, its marking, control of the location of 
holograms and movement of the matrix are controlled by an Elektronika-60 microcomputer. 


Documents are reproduced in an information machine controlled by a computer (an 
Elektronika-60). Key parameters input by users in dialog mode are used to locate the required 
document (or group of documents) in the catalog. The coordinates of the document found are 
transmitted through a communications interface from the base computer to the control 
computer, which determines the required holographic disk position. An image of the document 
appears on the screen of the information machine. Modes provided include document “paging” 
(forward and backward) for multiple-pege documents; examination of all documents with the 
same retrieval pattern; and transition to search for new key parameters. 


Holographic memory system data. The large capacity disk holographic memory system has 
been tested at the Leningrad Institute of Nuclear Physics imeni B. P. Konstantinov (LINF) for 
the storage of nuclear data and patent information. 


Nuclear data refers to information concerning the structure of nuclei and nuclear reactions, 
assembled in a nuclear data base currently containing over 200,000 documents. 


Patent information consists of descriptions of authors’ certificates and patents of the USSR, 
West Germany, England, France, the United States and Japan, plus annotations to patent 
descriptions in three areas: “C” — chemistry, “G” — physics and “H” — electricity. 


Each document, both patent and nuclear information, is indexed, i.e., each document has 
an assigned retrieval pattern. The retrieval pattern of a patent information document contains 
the name of the country, international invention classification (IIC) and document number. The 
selection of the IIC as a retrieval key was based on the fact that it is assigned by all leading 
patent departments, and in most countries the IIC is the only classification used (or is 
supplementary to a national system). Thus, the IIC allows patent documents from various 
nations to be combined and uniformly systematized. The presence of the document number as a 
part of the retrieval pattern allows both thematic and numerical searches to be conducted. 


The retrieval pattern of a nuclear information document includes (in coded form) the article 
title, last names of authors, the journal, its year of publication and other information of 
supporting bibliographic searches. In addition to the keys, the retrieval pattern of a document 
includes the coordinates of the document in the holographic disk archives and the number of 
pages of the document. The set of records corresponding to document retrieval patterns on a 
holographic disk makes up the catalog of the disk. 


We present as an example the structure of a patent information catalog entry: 
ISU GO6F 1400 T00567172 001 001958 003 
ISU is the patenting nation; GO6F 1400 is the patent IIC (class, group, subgroup); 100567172 is 
the document number; 001 is the number of the holographic disk sto~ing the document; 001958 is the 
number of the hologram on the disk; 003 is the number of pages of the cument. 


The data base of the automated holographic storage item was created using the 
KVANT-M data base management system (DBMS)*. This DBMs was selected for such features 
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as independence of programs and data, the ability to maintain multiple files with multiple-key 
access, the variety of data description structures, field-level data access, etc. 


The organization of the KVANT-M DBMS features files consisting of records of identical 
structure, each with a unique internal sequential number (ISN). Each record contains several 
age field being the minimum named unit in a record), each of which has a unique name and 
an assigned format. In describing a file, any field in a record can be declared a doscriptor, used 
as a key to access file records. 


Basic Characteristics of a Record In the File NUCLEAR 








(Identifier Type ASC) 
Data Field | Field Descriptor 

Abbreviation Size Characteristic Contents 

DISKR 6 Y Document number 

NJUR 6 Y Journal 

NTOU 6 Y Volume 

NSTR 5 Y Page 

NGD 3 —* Disk number 

NGOL 6 --- Hologram number 

CLIST 2 --- Pages in document 




















The physical structure of each file in the data base is two areas: An associator and a data 
area. The data area contains all records of the file, including the ISN and data, compressed 
according to the field type. The associator contains inverted lists of descriptors and an address 
converter, providing independence of the address of a record from its actual physical location. 
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Key: 1, Information encoder; 2, reader; 3, information on microfilm; 4, 
SM computer; 5, writer; 6, information machine; 7, Elektronika-60; 8, 
holographic disk document recorder; 9, document reader; 10, information 
on screen, hard copy and other media. 
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The information base of this system is a set of independent files containing information 
catalogs stored on holographic disks: NUCLEAR — the nuclear data catalog; PATENT — the 
patent information catalog. 


Schemas containing the field names, types and the data in the fields plus a characteristic 
indicating whether a field is a descriptor have been created to describe each file. Each file also 
corresponds to several subschemas which determine the location, type and number of fields 
necessary to perform a specific task. 


In particular, the NUCLEAR file (table) contains seven simple fields, four of which are 
descriptors. Information is compressed as it is loaded into the data base: Trailing blanks are 
deleted from character information, leading zeros from numeric information. 


The files of the holographic storage system can contain up to 210 records and are stored on 
a single magnetic disk. Magnetic tapes are used for system backup and restore. 




































































Dis+ holographic storage control hardware. The disk holographic storage system is 
controlled by a combination of hardware and software facilities. Stepping motors with 
ball-worm gears mounted on a frame make up the holographic disk head drive, used both in the 
automatic recording machine and in the information machine. This allowed the use of virtually 
identical holographic disk control hardware for both writing and reading of information. We 
—* therefore describe only the electronics controlling the process of writing on holographic 

sks. 


The hologram write cycle in the automatic writing machine includes the following 


operations: Settling of the holographic disk, exposure, film advance and movement of the disk 
to record the next hologram. 


Synchronous operation of the individual parts of the automatic recording machine in the 
proper sequence is supported by the electronic control system (Figure 2), based on 
Elektronika-60 computer 17, which is coupled to the automatic recording machine through 
parallel input-output interface 16. 


To allow settling of the disk, all supply voltages are disconnected from the optical- 
mechanical portion of the machine, and the electric brakes are released, fixing the disk in the 
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desired position. Disconnecting the voltages decreases vibration at the moment when a hologram 
is recorded. The settling time is established by the operator controlling the recording operation, 
and monitored by the computer. 


In order to assure good quality recording of a matrix using unstabilized laser 1, an 
automatic exposure monitoring and adjustment system is used. The computer tes the 
signal which starts the laser 11. A portion of the light flux from cubic prism 2 is then sent to a 
photoreceptor and analog-digital converter 12. This digital information on the amplitude of 
each laser pulse is added by the computer. When the proper threshold is reached, exposure is 


stopped. 


The film is advanced by film advance mechanism 9, the electric motor of which is switched 
on by thyristor switch 14. Should the film break, sensor 19 detects the break and stops 


recording. 


The disk matrix 6 is advanced by the computer as follows. Thyristor switches 9, 10 receive 
the instruction to turn on the stepping motors. Following a delay equal to the time required for 
the stepping motors to begin operation, electric brakes 5 are disengaged through thyristor switch 
15. After this, the required number of pulses are fed from the computer to stepping motors 7, 8, 
causing them to rotate. The voltages are switched off in the opposite sequence. 


The initial position sensor 4 (light source, mirror on shaft and photodiode) allows the initial 
position of the disk to be set for writing and reading. An optical sensor is used to monitor the 
zero position of the disk, a mechanical sensor determines the radius. 

















Retrieval of documents, their reproduction on the screen for reading and selection are 
performed by means of an information machine, the optical-mechanical system of which is 
illustrated in Figure 3. Continuous gas laser 1 (LG-106 M) is used to restore the Fourier 
holograms from the matrix. The beam of this laser is collimated by two lenses {4 and 5 and 
directed by mirror 6 to matrix 7. Mirrors 8 and 9 are used to reduce the dimensions of the 
reproduction device. The screen of the information machine is a decorative frame measuring 
230x330 mm with two matte-finish scattering surfaces 10 and 11. One matte surface is 
stationary, while the second rotates continually at 38 rpm (radius of rotation 1 mm). The disk 
is moved to select the desired hologram by two wave-type stepping motors 19, 14 in a polar 
system of coordinates. The use of the double scattering surface improves the scattering index, 
assuring more uniform distribution of screen brightness. 
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The electronic control system of the information machine, diagrammed in 
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Key: 1. To computer. 
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Disk matrix diameter 

Matrix capacity 

Hologram diameter 

Recording density 

Recording speed 

Hean time to prepare one disk of 
information 


Input transparency sise 
Hean document retrieval time 





including visualisation 2 sec 
Screen resolution 25 lines/um 
Speckle noise suppression in restored 
image 100 
Recording radiation source (pulsed 
gas laser) [61-37 
Reproduction coherent radiation source 
(continuous gas laser) [4-106 1 
System operating modes Autonomous, on 
line with computer 
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Key: 1, Holographic disk subsystem; 2, document pon ery 

subsystem; 3, standard RSX 11 —S oem service Salar 4 
data input-output driver (SM-4, Elekt ); 5, generation; 6, 
— reproduction control; 7, document ae 8, KVANT-M 
DBM 


Automated holographic storage system software. The disk hic storage system 
control software was developed using an SM-4 computer in the RSX environment and an 
Elektronika-60 microcomputer. Figure 5 shows the general structure of the software, which 
consists of two independent subsystems: Holographic disk document storage and reproduction 


control. 
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Key: 1, Receive request; 2, request correct?; 3, no; 4, yes; 5, error 
message; 6, analyze request; 7, write hologram; 8, start laser; 9, start 
film transport: 10, control stepping motors; 11, set initial status: 12, stop 
instruction?; 13, stop message. 


The document storage subsystem software (Fi ene 6), which controls the operation of the 


— — performs the following major functions: 
initial matrix status; 


— assign hologram number; 
— start and stop electromechanical devices; 
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— write hologram on matrix; 
— dash dows entematio seeording machine. 


In addition to these functions, the software can set and change the integral exposure 
threshold, stepping motor settling time and stepping motor speed, both angle and radius, 


When the subsystem is started, all programs involved in the cycle of writing one hologram 
are initialized in sequence. Upon completion of the cycle, the hologram counter is incremented 
and the cycle is repeated until the entire matrix is filled or a stop instruction is generated 
(planned completion of operation, laser fault, etc.). 
















































































Key: 1, Open channels and data base files; 2, “ENTER REQUEST” 
message; 3, wait for response; 4, request made?; 5, no; 6, yes; 7, locate 
document; 8, stop operation; 9, continue search; 10, generate retrieve 
buffer; 11, end of file?; 12, complete message; 13, search 
FIND; 14, “END OF DOCUMENTS” ; 15, close channels 
data base file; 16, search using GET NEXT; 17, end; 18, completion 
code=07?; 19, data base error wessage; 20, send document coordinates to 
Elektronika-60. 





The parameters necessary for operation of the subsystem are input by the operator from his 
terminal in dialog mode. The write subsystem is implemented on an Elektronika-60 computer, 
the programs were written in Assembler. 


The read subsystem includes the software necessary to create catalogs, plus facilities for 
retrieval, identification and visualization of documents. 
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The lines of the catalog, containing the retrieval pattern and coordinates of documents on 


the c disk, are input by the operator at the terminal. The text editor EDI or screen 
editor TED is used to generate the initial catalog file, which is then entered into the data base 
by the LOADER in accordance with the file description, loading schema and 


subschema. Utilities of the KVANT-M DBMS are used to monitor the information placed in 
the data base, protect it and enter new records in the catalog. 


To select documents from the holographic disk archives, the document retrieval 
diagrammed in Figure 7, is run. A user request input at the information machine 
contains one or more descriptors of the desired document. The KVANT-M DBMS can search in 
logical or random descriptor sequence. When usi cal sequence, access to records is 

in the sequence of increasing values of the ptors selected. The descriptor value 
indicated in the request is used as the initial point for successive examination by inverted lists. 
The physical address of the records found is constructed by the address converter. Random 
access is used in response to a request consisting of a combination of several keys indicating the 
value or range of values of several descriptors. The result of processing such a request is a 
logical combination of several ISN series. 
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Key: 1, Input request; 2, required?; 3, yes; 4, no; 5, document 
paging; 6, send request to SM computers; 7, await response; 8, response 
present?; 9, time out?; 10, determine required document; 11, “computer 
not responding” message. 
When a document is located, its coordinates are sent to the Elektronika-60 computer which 


controls the information machine. A flow chart of the program determining the required matrix 
position is shown in Figure 8. us 






































Information is transmitted over the base system computer to the control computer by 
means of a special input-output driver. In addition to determining the required document, this 
program also “pages” forward and backward if a document contains more than one page. 
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which is cally ble in a data base of over 10 og pe select 
documents based on keys (for example, select materials for composition of reports, reviews 
on various themes, etc.), leading to a significant savings in working time. 
This is noise tolerant, insensitive to and invariant to of 
system —* vm defocusing, shifting 
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[Text] Introduction. A system description language “? is the input language used to create 
automatic (or automated) electronic equipment test generation systems based on hardware 
descriptions. Such systems cannot yet satisfy all the requirements of practice, since their 
capabilities have behind the i complexity of electronic equipment. This limits 
the area of their cation to relatively simple modules. 


This has resulted in the appearance and utilization of task-oriented check languages, which 
are algorithmic , in contrast to circuit description languages, for the development 
test programs for c equipment modules and systems. can describe the 
test algorithm for a module of virtually any complexity, but the composi of an algorithm 
requires a deep understanding of the laws governing the functioning of the tested object and, 
consequently, the designer of the unit itself must be involved in the task. 


The number of check in existence today * ‘ is sufficient to threaten a “tower of 
babel” situation in this area. More than a quarter century of history of the development of 


aa ks cuits tama ett ee wads © toe “ese The element of 
su vism 


unately, the experience of using check languages is 
programming languages). This 








of check languages. The prerequisites for the application of many check 
languages result from the differences which exist in the conditions under which actual testing 
processes occur (differences in classes of objects tested, composition of testing and diagnostic 
equipment, test goals, a However, there are but two basic situations in which differences in 
approaches check languages are significant. 


In one, there is a “doctor-patient” relationship between the test system and the tested 
object, i.e. the test system is independent of the tested object, but can act upon it and analyze 
its reactions, whereas actions in the reverse direction are minimal. This is the situation which 
always obtains if neither the tested object nor the entire system has facilities to implement an 


assigned testing algorithm. 


In the second situation, the tested object is (or is artificially made to be) a structural 
element of a certain intelligent system and is tested by some form of self-testing 
(“self-diagnosis”) system. In this case, the tests are created by professional programmers 
the linguistic and operational facilities of the system, and the problem of a special 
language does not arise, or is solved by traditional programming methods — libraries of macros, 
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subroutines, etc. (this situation usually arises in testing of high-level units — system instruments 
and devices). 


Let us analyze the first of these situations and utilize the term “check ” as 
applicable to it. We note that this is the case in which it is possible to test and diagnose 
low-level units under series production conditions. 


Since check languages are thmic, it is desirable to use the experience gained in the 


creation of ordinary programming during their development, conserving the traditions 
of these efforts: 


— structure of program text, with distinction among description, control, 
assignment and input-output operators; 


— the concepts of the identifier, file, index, label and decimal constant, together with the 
syntactic elements traditionally used (for example, name and label — alphanumeric lexemes 
beginning with letters, the “:” as a discinguishing characteristic indicating a label, etc. ); 


— the syntax of an t operator A=B (or A:=B) with the functional-operational 
structure of the write portion B, etc. 


Check languages are designed for a broad range of users, particularly electronic equipment 
design engineers. This demands of such a language maximum simplicity and intelligibility of 
syntax and semantics, orientation to the terminology and procedures utilized in testing processes. 
The requirements of clarity and “readability” of programs should also be met, since programs 
are used as technical documents describing the methods used to check products. In particular, 
the structure of the should be as close as possible to natural language statements. The 
language should be as brief as possible, since brevity significantly reduces the labor involved in 


writing and using programs. 


It is therefore not desirable to include in the language terms which are difficult for 
nonspecialists to understand and master including, in the opinion of the authors, such things as: 


— structuring facilities (blocks, procedures, the concepts of local and global 
variables, etc. ); 


— complex control functions (switches such as the assigned GO TO, complex loops, etc.); 
— complex data types and input-output specifications. 


In designing a check , one must also recall that the test system instruments include 
mini- and microcomputers. designer should therefore create effective, fast systems for 
translation and interpretation limited resources, i.e., the design of the language should be 
approached from the standpoint of minimizing its imaging facilities. It is the optimal selection 


of linguistic facilities based on these criteria (in addition to the creation of practically effective 
systems) which, in our opinion, is the most a of today. We should note that 
there is a tendency to replace this with theoretical development of “superhigh level” languages 
with the maximum capabilities, along with the maximum problems of their implementation‘. 
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— — ch are exchanged by the test system and the tested object. For example, for 
digital objects these include binary vectors of significant dimensionality (up to several hundred), 
with complex internal structure. Accordingly, the language must include facilities for p 
such data, and practice has shown —* the convenience and flexibility of these facilities have a 
great influence on linguistic = in general. In particular, they cannot be treated as simple 
masses of bits, as, for example, in PL-1. 


One concept for working with such data was implemented in the TEST + (and 
borrowed in a form expanded for testing of digital — in the OKA language*). In the 
opinion of the po Sm gg it is insufficiently flexible. In particular, structural elements are 
identified by ordinal numbers 4 of the component bits or by means of another bit array 
(mask) of * dimensionality. This leads to rather cumbersome expressions, a loss of program 
readability, and significant difficulties in programming complex structures. Effective machine 
implementation of operations on elements of such structures is quite difficult. 


The following approach is used in YaK-3. Elements of a binary structure are considered 
ordinary integer-type variables, processed by an ordinary assignment operator, but with an 
expanded operation set, and their combination into structures, including dynamic combination, 
is performed by special operators. 


Operators (which we call signal operators) conv information objects into physical 


signals and vice versa represent a special group in check . From the standpoint of 
system p they are input-output operators. However, it would not be correct to 
interpret t as such in a check language. They must rather naturally reflect testing 


procedures from the standpoint of the user. The degree of development of this group of facilities 
and their level of task orientation also represent one of the most important components of a 


check language. 


Description of the YaK-3 language. For purposes of brevity and clarity, we will base our 
description not on the Baccus metalanguage, but rather on — examples, turning particular 
attention to operator semantics. 


The alphabet of the 7 Bey the characters of KOI-7 code. The identifiers 
ye of variables, arrays and are alphanumeric lexemes of arbitrary length (only the 

six characters are used). The “period” and “underline” are permitted within names — they 
are considered letters in ‘bi case. This allows the use of such names as OUT. VOLTAGE, 
INPUT SYNCHRONIZATION, etc., along with their abbreviated versions. 


There are two basic data types: INTEGER and ANALOG (corresponding to real 
numbers). There are five types of constants: Decimal integer, octal, binary, hexadecimal, 
floating point, for example: 101010 — binary, ‘177776 — octal, o AFFF — hexadecimal. 


One-dimensional arrays of variables and indexed constants are allowed (the | ge may 
be expanded here, though the need has not been demonstrated in practice). 


A subclass of “Standard names” is included, which do not require description in user 
programs. They are designed to orient the language to specific hardware devices and classes of 
tested objects. Standard names represent test system instruments, their ranges and modes, test 
system channels, etc. From the standpoint of implementation they are built into the language 








translators. When necessary, the user can specifically represent nonstandard names by means of 


the DESIGNATE operator: 
DESIGNATE FREQUENCY/K17, STROBE/KS, ..., 


where K9 and K17 are standard names (for example, of digital programmable test system 
channels), FREQUENCY, STROBE are user names related to the tested object. 


The assignment operator has the traditional form: A=B, where A is a simple or indexed 
variable, B is an arithmetic-logic expression. However, the list of operations in B is significantly 
expanded, and furthermore is left open. 


Two-position shift operators of various types and a number of special operations have been 

included: EVEN, ODD, AND, NAND, etc., for example: A=B¢-2 (low-order byte of A 

value of low-order byte of B, cyclically shifted left two 38 =B->K(M) (word A 

equal to word B, logically shifted to the right by K(M) bits); A(K)=A(K)&*1010 (element K of 
A logically multiplied by the binary number 1010). 


Abbreviated recording of an operator is permitted when the left portion (A) coincides with 
the left operand of the right portion (B). For example, the last operator is equivalent to: A(K) 
&*1010. 


Practice has shown that this solution yields a significant reduction in check program size, in 
which structures such as ADDRESS+1 (increment address by 1), , CHANNEL (bitwise in 
version of channel) are frequent. 


Special operations perform actions typical in testing tasks. For example, suppose the tested 
object has a two-byte data width, and each byte has a parity check bit. A si is generated 
on the bus by representing it in four variables: BYTE1, BYTE2, CB1, CB2, w BYTE1 and 
BYTE2 can be assigned arbitrarily, while CB1, CB2 are calculated as CBI=EVEN BYTE]; 
CB2=EVEN BYTE2 (the operation EVEN computes the mod 2 sum of ones in an operand). 
For greater clarity, operands are not placed in parentheses unless required for unambiguity. 


Combining of variables into ‘@ common binary structure is performed by two main 
operators. The first provides a static description of a group of variables: 


<name>#<name list>. (1) 


The semantics are as follows: The variable <name> is a binary sequence which is the 
concatenation of the binary sequences in <name list>. For example: 


BYTE#K1, K2, K3, K4, K5, K6, K7, K8; 
CB1#K17. 


Here K1, K2, ... are the standard names of digital programmable test system channels, i.e., the 
operators describe the connections of the test object with the test system and are naturally 
understood by the user. 


The second of these operators is dynamic and assigns descriptions to variables which have 
been declared by the first operator: 


<name 1>==<name 2>. 
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The semaniics are as follows: Variable <name 1> becomes a structured variable with <name 
list>, in the operator <name 2> #<name list>. This operator is particularly useful for testing 
ob which have several similar circuits (for example, channels). In this case, it works as a 

ware switch, connecting the physically different channels of the object tested to the same test 
program without changing the electrical switching. 


The machine implementation is as follows. A digital programmed signal buffer is reserved 
in the system — a binary file of sufficient dimensions. Each bit corresponds to a certain 
standard (for example, K1, K2, ...). The description operator (1) is translated to special tables 
which are stored together with the object program. The assignment operators, in addition to 
their usual action, access these tables and, if the variable in the left portion is included in the 
structure, fix the result of the assignment in the buffer. Transmission of the buffer directly to 
the tested object or comparison of the reaction of the tested object with its elements is 
performed by the signal operators (such as SEND, TEST), which are studied below. Feedback 
from the tested object is produced by an assignment operator with the special operation 
MEASURE, for example: 


CODE#K16, K4, K7 


CODE2=MEASURE CODE 


assigns the variable CODE2 to the set of three digital signals CODE directly from the tested 
object, connected to channels K16, K4 and K7. This provides extensive capabilities for 
automatic diagnosis of defects in the tested object. 


Control operators in YaK-3 are quite traditional and we shall limit ourselves here to a few 
examples: GO LABEL — unconditional transfer to a label; IF A)=16 GO LABEL — 
conditional transfer if A316; REPEAT 16, LABEL — loop operator, repeated 16 times (the 
previous sequence of operators, beginning with LABEL). 


The operators also include SUBROUTINE, RETURN (from subroutine), END (stops 
testing process and indicates results, PASS-FAIL), WAIT (synchronizes the program with 
events in real time). To give these operators more natural appearance, comments can be made 
in certain parts of the operator bodies (comments in bold): 


IF REJECT THEN GO TO TEST NAND CIRCUIT TO A LABEL M3 
REPEAT K TIMES BEGINNING AT LABEL M3. 


The basic semantic set of the signal operator group is quite similar in many check 

. In YaK-3 it consists of the operators: CONNECT — controls automatic switching 

of the tested object with the testing system, SET — sets operating modes of test system 

instruments, SEND — initiates transmission of input actions to tested object, STOP — 

disconnects input actions from tested object, CHECK, COMPARE — checks the reaction of the 

tested object to the input actions, MEASURE — measures the reaction of the object and 
converts it to digital form. 


For example: 
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CONNECT FREQUENCY — GCh1, 
VOLT.PWR — IPT2, 
OUT.VOLT —VTs1 


means connect (automatic) points FREQUENCY, VOLT.PWR and OUT VOLT of the te.ad 
object to the input-output devices of the test system — frequency ator No. 1 GChl, dc 
power source No. 2 IPT2 and digital volt meter No. 1 VTsl. Here GCh1, IPT2 and VTs1 are 
standard names; 


SEND FREQUENCY = 10 kHz, 
VOLT.PWR = -24 V 
MEASURE OUT.VOLT = VTs1 


initiates input actions, measures the signal at the output of the tested object in digital form with 
the instrument VTs1, placing the result in the variable OUT. VOLT. 


This set is insufficiently flexible for testing and diagnosis of digital objects, since there are 
many standard actions related to testing of objects of this type which can be represented more 
naturally and effectively by specialized operators. For example, the ordinary method of 
switching digital tested objects is rigid connection with programmable test system channels, and 
testing req merely the assignment of the distribution of test object inputs and outputs 
among channels. This switching is most conveniently reflected by the operators INPUTS <name 
list>, OUTPUTS <name list>, where <name list> is a list of the names (standard or 
introduced by operator [1]) of the input and output signals, respectively. The INPUTS and 
OUTPUTS operators in YaK-3 are dynamic, allowing switching of the tested object during the 
course of a test (for example, to test objects with bidirectional lines). 


Frequently when digital objects are tested, a fixed sequence of actions in the basic semantic 
set is used: SEND — MEASURE — COMPARE. In YaK-3, this corresponds to a single 
operator TEST <specification of input actions and standard reactions>. To prevent testing of 
object reactions which take on uncertain or unknown values for a certain time interval, the 
dynamic MASK operator is used: MASK <name list>, where <name list> lists the signals 
which are to be tested in the TEST, CHECK and COMPARE operators. 


Modern test systems frequently include hardware channels which implement the most 
common interfaces. The operators READ and WRITE are used to exchange actions and 
reactions through such channels. For example: 


WRITE COM.BUS, 
ADDRESS = ’1000, WORD = 0 


means write a zero work through the “common bus” channel at address 1000,; 


READ COM.BUS, 
ADDRESS = ADR, B = BYTE 


means read a byte from the address in variable ADR into variable B. Here COM.BUS, 
ADDRESS, WORD and BYTE are standard names. Data arrays of a standard form (“check- 
erboard” type) are exchanged in a similar manner, greatly reducing the time required to test 
such objects as memory units. 
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Test results are indicated by the operators PRINT and PRNT.FAIL (another peculiarity of 
a check ). In test processes there is always an unstated logical variable (in YaK-3 it 
consists of the standard names PASS-FAIL), and in the initial state has the value PASS, 
on the value FAIL if a deviation from normal functioning of the tested object is found to en 
any test. The difference between the operators PRINT and PRNT.FAIL is that the former does 
not influence the PASS-FAIL variable, while PRNT.FAIL sets it to FAIL (a similar relationship 
exists in the pair of operators CHECK-TEST). Upon completion of the testing process, the 
variable PASS-FAIL is analyzed by the END operator and the corresponding indicator is sent to 


the monitoring post. 


Output is formatted by the message text element description operator TEXT: TEXT 
n/<text constant>, where n is an integer, identifying the <text constant> which follows it. An 
output example: 


TEXT 1/DEFECT.LINE 2, CODE = 
TEXT 2/, LOOP 
IF FAIL THEN PRNT.FAIL 1/CODE, 
2/LOOP. 
The result will be the message: 
DEFECT.LINE 2, CODE = '77, LOOP 4 


(here ’77 and 4 are the current values of the variables CODE and LOOP). 


Implementation and usage experience. The YaK-3 language has been used for several yer_’s 
as an input language of three types of stands for testing of digital modules. The base machine of 


the test stands is an Elektronika-60 computer. The software is based on the YaK-3 actuating 
system, written in macroassembler for the FODOS operating environment. The actuation 
system includes a kernel containing a translator, an interpreter for the hardware-independent 
elements of the language, dialog program debugging system and system for communications with 
the test-stand operator. The kernel of the system is implemented together with the driver of a 
specific test system which implements the hardware-dependent elements of the language and an 
adjustment module. This module is used to set the standard names, distribute memory and 
perform other actions involved in generating a specific actuation system version. 


The translator translates m YaK-3 to an internal intermediate language. The 
decisions made in designing be hee, discussed above, have allowed completely resident 
operation of the actuation system along with programs in the intermediate language with lengths 
of up to 2-3 thousand operators in 28 Kwords of RAM. The intermediate language retains all 
information on the initial program necessary for source-language debugging. 


The debugging facilities contain a full set of functions used in such systems — dialog 
control of program execution, indication, tracing, etc. We note that the output of the debugging 
system (for example during tracing, single-step execution, etc.) is also represented in the source 

by partial reverse translation of the intermediate language. The very high translation 
speed (on the order of 3000 operations per minute) does not require storage of object modules in 
the intermediate language in internal memory (on floppy disks). In addition to the savings of 
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disk storage space (which is rather sparse in floppy-disk systems), this significantly improves the 
ease of use of the system (in particular, the user does not need to learn the details of file system 
organization on the floppy disks, the frequency of data transfer to and from the disk is 
significantly reduced, etc.). 


In two years, more than 50 testing programs for complex digital modules (containing over 
100 MSI and LSI chips, including microprocessors and memory elements) have been written in 
YaK-3. Most of these programs are now in commercial use. The mean length of a prograr: is 
500-700 statements, the maximum — up to 1.5 thousand. Test programs are developed and 
debugged by the hardware designers themselves. Although most of them are first-time software 
product producers, the YaK-3 language, our experience has shown, is easily mastered by this 
range of users and can be effectively used to perform testing tasks. 
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Text] The task of decomposing a logic function in order to implement it in a 

c array (PLA) network arises if the number of variables of the function is greater than the 
number of inputs of the array. The operation of decomposition requires selection of a solution 
path leading to an optimal result, i.e., a PLA scheme should be generated which is near minimal 
with acceptable costs of performing the actual computation process. 


Generation of the optimal result requires decomposition of a function allowing its 


implementation with the smallest number of programmable logic arrays of the required 
structure. 


Some success has been achieved in developing decomposition methods to produce the 
desired result “?, but the problem cannot be considered solved. The methods which have been 
developed do not allow analysis of intermediate results during the course of the solution or 


control of the process. The capabilities of the programmable logic arrays are not fully used, and 
computations are performed in tabular form. 


This article is dedicated to solving the problem of decomposing a logic function with 
simultaneous computation of a PLA network formula in braic form considering the properties 
of the basic PLA. The function may be assigned by a bi or trinary matrix with one or 
several inputs. 


Suppose the function is given as two sets of values — one M(1) and sero M(0). Given this 
representation, the following type of decomposition is always possible. 


Each set can be arbitrarily divided into a number of subsets: 


M, (1), M.(h..... My(l), .... Ma (1), 
M, (0), M,(0),.... Mz(), ..., My (0). 


For any pair, a formula f separating the pair can be found. Then for a subset, for example 
M ,(0), a set of formulas is found which separates it from all the unit subsets: 


hh» Seer... Hee... h(n. 
Me (1) € fr (0) 
Ms) fe On = J ° 


The logical sum of these formulas separates subsets M ,(0) from set M(1): 
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This formula is implemented by a PLA if it is used as a device for computing the 
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where zis x or £. 


This type of decomposition and the use of a PLA corresponds to the following computer 
apparatus’. 


Tene ee ee 
values of the “1” and “0,” respectively. 

A matrix is constructed, for example M(0), by inversion of variables in matrix M(0). This 
matrix covers area M(1) and an area of uncertain values. It has the following properties, which 
are used to solve the problem at hand. 


The matrix M(0) is decomposed with respect to the variable z,: 
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is also arbitrarily divided into rows. 
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Any element z be absent. The A Used in trinary matrices, ma 
since all variables pee edo Matrix (2) retains all the properties of matrix ( 


wi the product fhe Ol 4 sp and M1) 


1) 


from it the Corresponding portion of set M(0), 





be omitted, 


Matrix (2) can always be produced to satisfy the requirements ofa PLA: The number of 


columns is no Greater than the number of inputs of a PLA, the number of rows is no greater 


than the number of terms. 


Subsequent Operations with matrices D are simplified, since the matrices separate only the 


corresponding portions of sets M(1) and M(0) 
The form of matrix (2) is changed slightly for a multiple-output function — 








Example 1. 
| Sum | Ka Xs XX 
Ri Ko My Ky xy Bo Xs X, x, 
XX x Xe Xs X4 x, 
Xy Xq Xs x % i % 
Wie lim & » Mj = “i xx |. 
Xi XX Xs Xi Xp x; 
x; Xy Xs x) My x. 
Ri My x, —— 
Mi Xp x, 
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the number of 
rows and element D increases, and they are encoded by the output codes of the initial matrix. 
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Thus, implementation of this function requires not four, but only three PLA’s (4, 1, 3). 


Example 2. A multiple-output 
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Obviously, M can be simplified if we used the one value rows rather than the zero value 
rows to output y,. Then, the third and fourth rows of matrix M, are not included in matrix M. 


Conclusions. A method is suggested for defining a PLA network by algebraic trans- 
formations of the initial function, fixed in tabular form, to a network formula. The problem is 
solved of implementing the network in PLA’s, with smaller number of inputs than the number of 
variables in the function. The method is applicable for both binary and trinary one~- and 
multiple-output functions. The method allows analysis and adjustment of the solution during 
the process of computation of the network formula. This allows expedient search assuring the 
most complete utilization of the base PLA’s as to inputs, terms and outputs. 


The result is a reduction in the number of base PLA’s and simplification of the solution 
process. 


Where the functions are assigned by a trinary matrix, the need to orthogonalize the rows is 
eliminated. 


1. Suprun, V. P. “Method of Implementing Boolean Functions Fixed In Interval Form In 
PLA’s.” Avtomatika i vychisl tekhnika, 1982, No. 5, pp. 30-36. 


2. Dyachenko, Yu. G. “Implementing Sequential Automata In a Network of PLA’s of Limited 
Size.” USiM, 1985, No. 6, pp. 69-73. 


3. Laszarev, V. I. “Matrix Method of Converting Binary Logic Function.” Avtomatizatsiya 
protsessov v selkhozmashinostroyenii (Automation of Processes In Agricultural Machine 
Building). Rostov n/D, Institute of Agricultural Machine Building, 1977, pp. 45-52. 
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[Article by L. A. Bulysheva, V. M. Fomin, R. T. Chernysheva and N. N. Yanenko, deceased] 


[Text] Introduction. Ee menting <. Senes Saran saat S08, SAP. Sean: Se 
great national economic problems are related to further ——⏑—⏑ — 
system . The solution of these problems will be greatly facilitated by the creation 
of multiprocessor computer systems. The speed of computation on such systems can be 
increased approximately in proportion to the number of processors in the system, if the 
algorithm used allows calculations to be performed simultaneously by all processors. 


As computer systems are brought into practical application, problems of organizing parallel 
computation become more pressing, since parallel computation is one means of accelerating the 
solution of problems'~*. The first works on parallel computing appeared in the early 1960’s and 
—— By the mid 1960’s a theory of parallel 

had been developed, using the results of scheduling theory, theory, general 
oa mathematical logic and other sciences‘. In the 1970’s, a number of multiprocessor 
computers with parallel computation were created, including the STARAN, ILLIAC-IV, B6700, 
Star-100, Burroughs, Cray-1, Elbrus-1, Rere, M-10, PS-2000 and others '?. 


There is an extensive library of works on the theory of parallel programming. Due to the 
limited space available to us, we have not set ourselves the task of weg g the contemporary 
state of affairs in this area. Our purpose is rather to study the problems 
computation based on engineering and physical application program packages. In our view, 
these problems are important because the development of parallel algorithms was — 
comparatively recently, and the available fund of programs is based on sequential 
computation. It is no less important that available engineering and physical Soles 
program packages were created using functional modules based on sequential algorithms. 


Major trends in the theory of paralld programming. We can briefly distinguish the 
following problems related to the theory of parallel programming: 


— The general or formal theory of parallel computation ="; 
— parallel programming methods and languages'’~*?. 





'This article is the last work written by a well-known mathematician, academician, USSR 
Academy of Sciences, Nikolay Nikolayevich Yanenko (1925-1983). At the request of his 
coauthors, the editors have studied the article and concluded that although the review does not 


present new ideas, its basic ideas concerning the organization of application software packages 
and parallel computations are still important. 
Stylistic corrections were made to the article as it was prepared for printing. 
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— operational problems of parallel programming**~*?; 


— creation of automatic parallel generators allowing conversion of sequential programs to 
parallel programs **~®°, 


We note that the organization of parallel computation, i.e., the paralleling problem, is 
complex’. In general, by paralleling we mean decomposition of a program (task) so that 
individual fr ts can be executed on different processors, such that parallel execution yields 
the same ts as would be generated by sequential execution” ® **, Complete solution of the 

alleling problem is possible only in a few areas — the creation of highly productive computers 
—— computer systems), development of new methods for solving large problems, 
paralleling of existing algorithms” *® °’, creation of effective el algorithms and programs"® 
plus also continued development of * —— 13 — of singin 
programming, programming languages, implementation of auto c parall , parallel 
— systems**), and finally, the creation of application program packages for parallel 
processors. 


The generation theory of parallel computation is directed toward the investigation of the 
properties of parallel computation, construction of formal models of parallel programs and 
systems, allowing investigation of parallelism, asynchronism, equivalence and other properties of 
parallel computations. 


Methods of parallel programming are used to create practical parallel programming 
languages, usually considered the final versions of parallel languages oriented toward various 
classes of systems and problems, or as modifications of existing languages with the addition of 
facilities for assigning parallelism. Thus, many works have suggested expansion of 
such as ALGOL-60 and FORTRAN by the addition of facilities for explicit assignment of 
parallelism, i.e., operators such as fork, join, parallel for, etc. Facilities for separation of parallel 
branches are provided in some algorithmic (PL/1, ALGOL-68), but are included only 
as necessary (for more detail, cf.7 1% 9% 4% 42 5% 55) 


The problem of paralleling (i.e., the creation of automatic parallel program generators, the 
development of algorithms for conversion of sequential programs to parallel programs) is one of 
the most important problems in parallel programming. This is because there are many 
sequential algorithms and programs which should not be abandoned. 


Most interesting for the authors are problems of paralleling programs and operational 
problems of parallel programming. The operational problems we allude to include determination 
of certain numerical characteristics of parallel computation, for example the expected time of 
execution of problems and the number of processors required. Operational problems of parallel 
programming thus include the solution of problems of composition of a schedule for execution of 
programs or program modules on multiprocessor computers. 


As a rule, the models of programs used to investigate operational problems are graphs. The 
points of the graphs are assigned weights which correspond to the times of execution of 
individual modules, programs or operators. Network methods are used to determine the 
minimum execution time of a program (computational chain), the time when execution can start 
for each program (operator) — the earliest moment and the latest moment of execution, as well 
as the number of processors necessary to execute a parallel program in a certain fixed time, i.e., 
the minimum number of processors required is determined. If the execution of a sequential 
computational chain is a control graph with informational communications between the points of 
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the graph, while a perallel program is represented as an information graph limited by a set of 
control connectiors"’, the task of paralleling is reduced to removing the controlling limitations 
from the information graph” ". 


The architect of multiprocessor systems largely determines both the programming style and 
the selection of numerical methods. After an acceptable solution method is found, the problem 
arises of its implementation in some practical programming , Le., the problem of 
developing e facilities for writing the parallel algorithms. possibility of organizing 
parallel information processing appeared with the development of computers which can use 
several devices to execute a single task. 


The following levels of parallelism are distinguished: 
— Microparalleling (parallelism within programs at the level of expressions); 
— miniparalleling (at the level of operators); 


— macroparalleling (parallelism among programs at the level of tasks). 


By analogy, three levels of paralleling of data are used, although 1-to-1 correspondence 
between program and data parallelism levels has not been achieved: 


— Microparalleling (at the level of elementary data); 
— miniparalleling (at the level of arrays); 
— macroparalleling (at the level of data structures). 


Paralleling of sequential programs can be performed by two means: Dynamically — during 
the course of computations, and statistically — during translation. 


With dynamic paralleling, analysis of parallelism and determination of independent 
branches are performed during computation — this is paralleling at the operating system level. 
With statistical paralleling, a source program is translated to a program in a parallel 
programming language before it is executed — this is paralleling at the translator level. It 
requires special system paralleling facilities or may be performed in the process of translation 
from source languages. 


The following programming automation facilities are presently available for the creation of 
parallel programs*': 


— A multilevel structural parallel programming automation system, oriented toward the 
creation of parallel system programs, called multiprocessing '* "5, 


— for writing parallel algorithms, either expansions of existing languages 
(ALGOL, FORTRAN) or new parallel programming languages designed for the creation of 
interactions among parallel program branches!” 24 22 52. 


— debugging facilities allowing modeling in a single processor of programs created for 
implementation on several processors; 
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— methods of paralleling programs with loops, without loops’ , and linear program 
structures*® 2% 3% 42; 


— splitting and clearing methods** and many others” ®. 


All of this indicates the importance of paralleling and the need to evaluate the effectiveness 
of solution of problems on multiprocessor computers. Let us discuss this question briefly. 


Effectiveness of parallel computation. The effectiveness of solving problems in parallel 
mode has been repeatedly evaluated both here and abroad. The effectiveness of solving problems 


in parallel mode is closely related to the general problem of defining computer effectiveness. 


The statement of the problem t be as follows. An algorithm for a task is subdivided 
into several branches which run simultaneously on different processors. The purpose of the 
computation is to reduce the time required to perform an individual task on the system. With 
limited computer resources, construction of parallel computation algorithms with high 
effectiveness is a complex task. 


The comparison and evaluation of algorithms utilizes®* the acceleration factor K, and the 
effectiveness factor K,: 


K,=T/T,, 


where 7’, is the time required to perform a task on a single-processor computer; T, is the time 
required to perform the same task on an n—processor computer; 


K=K,/0 
where n is the number of processors. 
It has also been that the effectiveness of executing a program be evaluated based 
on the processor loading r64. 
P=Dt/n-t, 


where P is the probability that at a certain moment in time an arbitrarily selected processor will 
— raokbncees sg Page oma ep coe Ayr tame ce Pager tntrey 9 baci 
processors during execution of a program; T' is the total time required to execute the program; n 
is the number of processors. 


A method was es in** for evaluating the effectiveness of solution of a problem in 
parallel form. To do this, the cost of performing a certain task in parallel mode was compared 
with its performance in ordinary mode. Analytic expressions were derived for the cost of 
performing operations in parallel mode and the effect achieved by paralleling was determined 
directly in the process of operations using data generated by the system after completion of the 
task. The conclusions generated confirm the practice of paralleling computations. Thus, most 
authors believe that paralleling is suitable for tasks requiring large quantities of random -access 
memory with little or moderate exchange of data with peripheral devices; for average tasks the 
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expediency of paralleling is determined by the number of between parallel program 
branches; small tasks should not be paralleled regardless of the n of exchanges of data with 
peripheral devices. 


Equations for evaluating the effectiveness of paralleling were presented in*®. 


We know that the main task of mathematical technology is optimization of a computer 
chain'. This task is particularly important for parallel computations. 


All of the problems we have listed have been discussed at length in the literature, except 
for problems related to engineering and physical program packages for —— computers. 


Some problems of application software package Application software 

pcg ac idly wd fr aig ad In ee rate Among the various types of 

great attention has been given to the development ws engineering-physical 

erent 465 designed to automate numerical simulation of complex physical processes and 

of — aden structures. The basic principles of organizing such packages 

and their software configuration have been developed, with two basic configurations: System 
and functional*® *?, The structural unit (functional module) of an engineering-p hysical ps 
is the application program, implementing a certain physical process in numerical 1 form‘ 


An example of construction of an engineering-physical package for computation of “flow 
around a body” based on the ISTOK system and available application programs as functional 
modules is presented in®*. The system configuration used is a modified version of ISTOK-1, 
invariant to the class of problem solved. Therefore, ISTOK allows finished software products to 
be included in the functional implementation by their formal representation‘ ® °°. 


The experience of batch technology to solve problems related to flow around a body 
tas eats as Geih cori Gm te Gani GAGA Glen tal SD using 
application programs as functional modules. [Effective performance of calculations requires 
organization of parallel computation, which results from the large volume of main memory 
occupied by each module and the duration of the computations, i.e., the need to reduce the time 
of computation required to construct the geometry of the body. The results of calculations are 


presented in®®. 


The computing process in the package can be represented in a formalized manner by stating 
that it is constructed on the basis of automatic construction of computational chains such as 


MAMAMa ... 2M, 1, ..., m, 


where M, is the functional configuration modulus; i is the modulus number of the system control 
program®?*5, Looping computation is also possible as follows: 


Fe ·· — —- 








A module in the engineering-physical package can be formally represented as 
M,;=M,(Fy Ap Ry Q,); 
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where M, is the name of module ij F, is the functional purpose of the module; A, and dowdy 


of arguments and reruts, respectively; Qi th iy. dhs cot of vediahle qdaatllinn, seting 
as arguments and results of ‘ 


A,={a,g}; Ry={r ahi Q= (dah 


Ay== (Giz3, Bigg, +++ Gigm)s Rem rings Figgs «+++ Cipn)s 
Qs = lom · Views +++ 9 Yipn)s 
where i is the set of modules in the engineering eee ae: is the set of 
parameters of module i, j=1, ..., p; kis the set pois « Peas By Ror é kal, ..., 
n 





-physical package are interrelated through their data 
so that the results of previous modules serve as arguments for 
subsequent modules. The parameters of the functional engineering-physical package modules are 


Consequently, sequential computation chains cannot be effectively implemented in 
multiprocessor computers unless special facilities for their paralleling are developed. The 
pease retin, po —physical packages developed for single-processor computers does not 
decrease the time of ng of objects in multiprocessor computer systems. 

Architecture of 


cal packages based on parallel action systems. There are 
several possible means for organizing paralleling of computations in application program 







— Organize parallel computations of several versions of the same problem (module); 


— organize paralleling, optimizing the computational chain consisting of modules designed 
for solution of a certain — problem. 


There are two levels of paralleling in engineering-physical packages: 


— Paralleling with respect to parameters of a single module of an optimal computational 
chain, which is used primarily for iterational processes; 


ee by optimizing a computational chain: Conversion from a sequential to a 


It is thought that paralleling is suitable for tasks occupying all of computer memory or 
requiring minimization of computing time. 
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A principle for paralleling of engineering-physical package computations has been suggested 
and the basic changes to be introduced to the system configuration outlined. The basic purpose 
of the engineering-physical package is numerical modeling of an object under various fixed 
conditions®', for example when argument a,,€ A, changes continually through a finite interval 
[o,/”, a, ; 4) or takes on discrete values froth a list: Bp={Ojpy yp) +++) 


As we can see, the very nature of numerical modeling allows or tion of parallel 
computations. Let us assume that the number of processors n, mL (L is the number of 
versions). Computations are organized as follows: First computations by module M, are 

n times on different processors with argument a,,={4, ,, 48 respectively, and n 
sets of results R,={R,,, Ry, ..., R,,} are produced.” An ar interface is then 
organized between ules M, and M,; data are automatically transmitted with the 
corresponding identification among the processors and module M, is called. The parameters 
required by the planner are stored in a data base. The same communications are provided 
between modules M, and M,, etc. until all links of the chain are covered (Figure 1). 
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Key: 1, R — Analyzer and computing process synchronizer; 2, 
analyzer and optimizer. 
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We should note that this organization of computations requires, after one module has 
executed n times, analysis of the results obtained (their comparison, combined processing, 
selection, etc.). Whereas when a module runs but once this stage is merely desirable, for parallel 
computations it is absolutely obligatory due to the expansion in the volume of data. Let us 
assume that after some analysis, n computational results were found to be unacceptable; the 
problem then arises of synchronizing the computing process (module M, runs n, times, module 
M, runs (n-—n,) times or module M, runs n times, module M, then runs (n+n,) times, etc.). 
Synchronization is also possible when the numerical algorithm implemented in a module depends 
on @,, for example in iterational algorithms. 


Therefore, certain changes must be made to the architecture of an engineering-physical 
package for organization of parallel computations: 


1) Functions of the basic system components of the package must be expanded: 
Introduce addition operators for data base access, include in the input language of the package 
operators for assignment of parallel computations, increase the load on the package monitor, 
introduce a new component — the paralleling unit, organizing parallel computation by 
optimizing computational chains or interactions among machines; 


2) a description of a module must be developed — a certificate, including the information 
required to organize parallel computations; 


3) create a package supervisor, responsible for synchronizing computations. 
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The “flow around a body” 66 can serve as an example of an application software 
package for which the principle of parallel computations outlined above can be applied. 


The library of functional modules of this package consists of: 


— Module M, for computation of supersonic flow around three-dimensional bodies with 
blunted head portion by an ideal gas stream; 


— module M, for computation of three-dimensional supersonic flow around a conical nose 
portion by an ideaf gas stream; 


— module M, for computation of flow around bodies by the Marsh method. 


The mathematical statement of the problem and numerical algorithms implementing these 
modules are studied in®’. 


Let us note the peculiarities of the modules required to organize computations. The 
application software p e of** was created to determine the aerodynamic coefficients and 
moments for a body of arbitrary shape over a broad range of Mack numbers (M) and angles of 
oo ae The machine time required to calculate the aerodynamic parameters is quite 
considerable. 


These computations can easily be implemented in a computer system using the plan 
suggested above, generating results in a much shorter time. Actually, suppose 


M=M(A,,, Ary Aig, Ruy Rig Rig, Ay), 


where A,, is the Mack number of the incident stream; A,, is the angle of attack; A,, are the 
physical characteristics of the medium; A,, are the geometric parameters of the blunt bodies; 
R,,={p, u, T) are the three-dimensional solution arrays; p is the density of the medium; u is the 
velocity vector; 7’ is the temperature of the medium; R,, are the integral parameters of the 
medium flowing around the body (including aerodynamic coefficients and moments); R,, is the 
array of coordinates of the difference grid (spherical system of coordinates). 


Module M, is 
M,= (Ay), Aga, Aggy, Aggy, Aggy, Rgy Rego Rss), 


where A,,=A,,, As.=A;,; As,=Aj3; As, represents the geometric parameters of the body; A,, 
represents the tw imensional arrays of the solution for a fixed cross-section z, generated either 
by module M, or module M,; R,, are two-dimensional arrays of solutions for cross section 
ma" =a"+(Az)”, R,, are the integral characteristics of the medium flowing around the body 
where =2"*"; R,, is the array of two-dimensional difference grid coordinates. 


The scheme for parallel computations for this application package is shown in Figure 2. 


As we can see from this Figure, solution of the problem of determining the aerodynamic 
parameters of a body as a function of M number is performed as follows: First module M, runs 
n times (equal to the number of processors), producing various output data required for the 
operation of module M,, then parallel organization of the third module is organized, for which 


47 


















































the system configuration organizes the intermodular interface, indicating the names of the 
parameters. 


Thus, when a multiprocessor computer system is used, the time required to solve the 
problem of determining C,=C,(a,M) can be reduced in proportion to the number of processors. 


Conclusions. Problems of parallel com 


oe An extensive fund of sequential programs and algori 
must be used effectively on multiprocessor computers. To do this, new methods for 
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[Text] Introduction. The area of application of control computer systems is constantly 
expanding. The number of important applications requiring high computer system reliability is 
also increasing, weave, Sbaece Sige Dee Ware eeee teen aes Cee ee alee 
and life. This is characteristic of certain process control systems and on-board control systems. 
If we take the term computer system to include a hardware-software complex consis of a 
computer, operating system and application software, the sources of failures may include 

and errors in any component of the computer system, as well as erroneous actions by the human 
operator for distortion of transmitted data. The reliability level of general purpose control 
computer systems is insufficient for important applications unless special steps are taken to 
—* reliability. These steps can be of two types: Prevention of failures and provision of 

ult tolerance” ꝰ. 


Steps of the first type are intended to eliminate errors in the design of computer systems, to 
increase the reliability and durability of system elements. These steps include comprehensive 
testing of computer mommy Bry. Beg oa on electronic — 22 as by as steps to 
eliminate program errors: ; cation, testing an of programs. It 
is impossible to achieve absolute reliability of hardware elements (dee physi or 
complete freedom from program errors (due to their great complexity); therefore, steps of the 
second type are very important. They are intended to give computer systems the property of 
fault tolerance, i.e., the ability to detect faults and eliminate or reduce their harmful effects and 
continue correct functioning. 


These steps include, for example, redundancy (duplication, voting) of computer hardware 
modules, long used as a method of hardware failures. Since many of the functions of 
modern control computer systems are implemented in software rather than hardware, it is 
important to extend these measures in order to neutralize software errors, a technique not yet 
sufficiently used. 


This article is dedicated to this second trend. Fault tolerance is improved by the use of 
special programs which expand the capabilities of the operating system and are available for use 
by application software. It is these programs, their design principles and algorithms, which are 
the basic subject of our research. 


Faults and errors. The general engineering concept of a fault as a loss of serviceability by 
an object must be refined in its application to control computer systems in which most of the 
functions are implemented not in hardware, but in software. At some level of abstraction it is 
possible to find common points in hardware and software faults, which are usually contrasted. 
The basis for this abstraction is to be found in the concepts of system and process. 


A computer system is frequently represented as a hierarchy of hardware and software 
systems, each of which is a combination of interacting elements in systems at lower levels of the 
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hierarchy. The interaction of these elements is determined by the structure of the system, which 
is embodied in the plan (design) of the computer system. 


A defect (error) in up the computer system appears as an intolerable 
deviation of its behavior on the —8 netional specifications. A fault is an event causing 
a defect. The vulnerable point of this definition is that that specifications of a computer — 
and its higher level subsystems are usually incomplete, contradictory and poorly documented 
This results from the difficulty of generating precise and complete specifications of complex 
systems, a fundamental problem of computer science. 
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State Diagram of pvrtom | Process of a System With a Possible 
Fault. 1, Correct states; 2, fault; 3, incorrect states; 4, system 


emergency. 


The functioning process of each system is considered a sequence of transitions from one 
state to another. Faults are transitions leading to erroneous (or defective) states; from these 
states the system may enter a state in which a defect is manifested? (Figure 1). A defective 
state is referred to as a state with an undetected fault. For example, a fault causing incorrect 
writing of data on a medium shifts the peripheral storage system to a defective state; the defect 
may be discovered later, when the error appears upon reading or use of the distorted data. 











The reason for the transition of the system to a defective state is always an internal system 
fault. Two types of such faults are possible: Faults in elements and structural faults. A fault 
in an element is caused by a defective state of the element. For example, breakdown of diode, 
distortion of a block of data as it is written to disk. Structural faults are caused by improper 
interaction of correctly operating elements, the reason most frequently being an error in Planning 
or a system design defect (these are called design faults in hardware). For example, improper 
connection of electronic elements by wires; a disagreement between the actual parameters in a 
subroutine call operator and the formal parameters in its description. A transition to this type 
of defective state usually occurs in the planning or manufacturing stage; exceptions include cases 
in —*8 contacts fail during hardware use or programs stored in computer system memory are 
distorted. 


The differences between these two types of internal faults are significant from the 
standpoint of fault tolerance: Hardware faults are easier to detect and correct than structural 
faults. Hardware faults are usually of the first kind, software faults of the second. This is 
because in complex systems the hardware is much simpler than the software, having a smaller 
number of component elements, interconnections and states, so that hardware planning errors 
are rather rare events. 


The difficulties which we have mentioned in specifying the design of complex software mean 
that software unavoidably contains errors not revealed during testing and debugging, making the 
reliability level of software lower than that of hardware’. We note, however, that this difference 
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is reduced as the degree of integration of hardware elements increases in LSI and VLSI devices: 
The complexity and varieties of interconnections among elements on a chip make full 

difficult and increase the probability of a plan fault. On the other hand, hardware is subject to 
physical wear and aging, while software is not; therefore, the instructions of a program, 
considered as elements, are always “serviceable.” We note that here also the difference is 
relative rather than absolute: As the requirements placed on a computer system change, 
programs are modified and new errors are introduced, the appearance of which is similar to aging 
and deterioration of program characteristics. 


Basic principles of fault tolerance. The basic principle used to provide fault tolerance in 
technical systems is resource redundancy. In computer systems, hardware (structural), time, 
data and software resources are made redundant in various combinations. We shall not further 
consider structural redundancy, since it is little used in standard general purpose computer 


configurations. 


Efforts toward assuring fault tolerance can be subdivided into two stages: Detection of 
defective states and recovery of correct states. The transition from the first stage to the second 
occurs in response to an exception signal when an error of some type is detected; the computer 
system begins to execute an exception handler program which contains the algorithm for 
recovery. 


Fault-tolerant facilities must meet the following requirements: 


— Defect isolation (they should not propagate through the computer system, for example 
by copying distorted data). This may occur when any subsystem is in a defective state. Defect 
isolation is facilitated by special computer system structuring techniques, as well as by meeting 
the next requirement; 


— earliest possible detection of defects without detailed fault diagnosis; 


— the use of a software process (task in the sense of the operating system) of protection 
from faults with various types of redundancy (in addition to structural redundancy at the 
hardware module level). First of all, this agrees well with the modern practice of specification 
and planning of control computer system software as a system of parallel processes; secondly, we 
have defined the concept of the defective state and transition specifically for processes. 


Testing and restoration methods. There are various methods for testing, i.e., detection of 
defective states of an element (system), distinguished by the method of establishing the fact of a 
fault. Let us list the most common ones. 


Testing by copying: A copy of a process is executed independently of the original, and 
equality of the results is verified; recomputation with comparison of results, storage of duplicate 
data structures, etc., similar to duplication and voting among hardware modules. This type of 
testing, quite costly in terms of redundancy, does not detect structural failures, but is quite 
effective for detecting occurring faults, i.e., failures in elements. 


Testing by coding: Based on redundancy in the representation of data, with additional bits 
used to reveal data distortion. For example, parity checking as bytes are transmitted, 
—2 for data blocks. Both software and hardware failures are detected. The method is 
economical. 
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Time ing: Limitation of the time allotted for execution of individual process phases. 
Plan faults and faults in elements causing excessively slow operation are detected. The method 
is important for real-time systems. 


Acceptability testing: Verification that the state of a process corresponds to the 
specifications of acceptable behavior provided by the developer. This specification may be 
represented as statements concerning the values of variables at certain points d the process; 
for example, file index within certain limits, value of an angle (less than 180°), etc. This 
method is widely used to reveal software errors both during debugging and during use of 
computer systems; data distortions are also detected. 


ig ge ic testing: Testing »f the correct operation of element by providing test input 
signals, which the correct output data are known. This method is commonly employed to 


test computer hardware. 


From the standpoint of program implementation in a standard operating environment, 
testing methods are usually divided into three types: Forced, active and passive. Forced testing 
is the primary reaction to emergency signals generated by computer testing equipment or 
operating system programs (memory protection, overflow, etc.); passive testing implements time 
and acceptability tests; active testing refers to diagnostic tests. 


Recovery may be achieved by rollback — returning the process to the correct state 
ing occurrence of a fault, or by correction — transition of the process to the correct state 
without ret to a previous state. In Fi 1, rollback is illustrated as a recovery from any 
defective state, example to state 2, while correction is represented as the transition T, to 
state N. In order for rollback to be possible, certain states of the process, potential rollback 
points, called recovery points or check points (in the terminology of the OS YeS operating 
system) must be recorded. We note that in this cases there is no guarantee that the recovery 
point will be a member of the set of correct states. Rollback utilizes a significant portion of the 
time reserve, since in order to return to normal operation the process musi repeat a sequence of 
states already passed. Obviously, rollback is an effective means of dealing with hardware faults. 


Correction is much less universal than rollback, since it requires knowledge of the specifics 
of the process in order to neutralize defects. 


Other possible recovery methods include: Masking of faults by voting when copy testing is 
used; reconfiguration (for example execution of an alternative version of a program, possibly less 
precise — with degradation) and soft shutdown. 


Rollback of interacting processes. The problems of isolating defects and selecting recovery 
strategies are most complex when processes which exchange synchronization si and/or 
messages must be rolled back. When a fault arises in one such process, not only must it be 
rolled back, but coordinated rollback of other, interacting processes is required. Otherwise, 
synchronization of processes may be lost or distorted messages propagated. Coordinated rollback 
of several processes requires that their number and the extent of the rollback both be minimized, 
particularly for real-time systems. A clear example of the impossibility of this requirement in 
some cases is the domino effect” ‘, in which the rollback “wave” expands uncontrollably in 
width (in the number of processes involved) as well as depth (time). 


Figure 2 shows conditions under which the domino effect may arise for three processes. 
Obviously, after discovery of a fault in process A at moment OA, all three processes must be 
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The Domino Effect For Three Interacting Processes. 1, Exchange of 
messages; 2, time; TB — recovery point.. 


A number of algorithms of this type have been suggested. Some of them include no actions 

to prevent the domino effect, but it is detected *®. When these algorithms are executed, a 
dynamic list of related processes and recovery points within them is generated, and in case of a 
failure in a process, this list is used to roll back the required processes. Other algorithms” ° 
require development of all application programs in parallel programming languages which include 
special structures describing coordinated actions to be taken when rollback is required in various 
processes: Establishment of recovery points, testing of correct functioning, rollback, exchange of 
information. In addition to the fact that this requires the development of new programming 
, the use of such algorithms is not acceptable from the technological standpoint due to 


languages 
the impossibility of independent development of processes. 


Let us analyze a rollback algorithm which does not have these shortcomings. Its essential 
advantage is that it can run under both universal and specialized operating systems, in strongly 
and weakly coupled systems, and on networks. The algorithm is implemented in a rollback 
subsystem, a special software layer between the operating system and the processes. 


The algorithm is based on the concept of the conference — a dynamically created set of 
interacting processes. For each conference there is a conference list — a data structure 
describing a set of pairs {PROCESS NAME, TB}. If one process fails, all processes in the 
conference are rolled back to a TB. Each process can be included in only one conference; 
inclusion in a conference occurs before any interaction. At each moment, there may be several 
conferences in existence in the computer system. Conferences are limited in size, i.e., the 
number of participants and/or time of existence; limitations are selected on the basis of the time 
reserves and planned computer system throughput characteristics. 


The essence of the algorithm consists of testing the size and length of conferences and 
establishing, when necessary, additional recovery points (BTB) in addition to the recovery points 
established at moments planned by the process designer. These initial recovery points are 
inserted to assure correct completion of the conference, which occurs in one of two cases: 
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Example of Breakdown of a Conference Upon Reaching the Maximum 
Size. 1, conference limit. 


— A request for interaction with a process not included in the conference occurs, while the 


size of the conference has already reached the maximum permitted (Figure 3 — size of 
conference limited to three processes); 


— one of the processes must establish a planned recovery point (Figure 4). 
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Example of Breakdown of a Conference Due to Setting of Planned 
Recovery Point In Process A. 


It can be demonstrated that synchronous departure of processes from a conference with 


simultaneous setting of supplementary recovery points guarantees that the domino effect will not 
occur. 


The rollback subsystem processes information on sending of messages, setting of recovery 
points and faults. Processes access the subsystem through the following instructions. 


SEND (sending process name, receiving process name) 
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The rollback subsystem in this case performs any actions needed to reformat the lists of 
conferences, establishes supplementary recovery points in processes, then allows the information 
to be sent. 


FAULT (process name, fault detected) 


This subsystem rolls back all processes in the conference to the moment when they entered 
it. 


SET_TB (process name) 


The subsystem reformats the conference lists as necessary and sets a supplementary 
recovery point. 


Thus, the basic actions performed by the subsystem with respect to processes are as follows: 


ROLLBACK_TO_TB (list of processes in conference) 
SET_BTB (process name). 


These instructions and actions allow any rollback algorithm” ‘* to be implemented. The 
rollback subsystem may be centralized or decentralized. If centralized, it is a special — 
storing information on conference lists and performing all actions necessary to roll 
interacting processes. In the latter case, implementation of the subsystem is more complex. It 
includes the corresponding protocols to “take control” of a process, perform rollback, as well as 
protocols to maintain identity of information on conferences stored in various processes. This 
implementation is the only possible one for distributed computer systems. 


The use in the rollback subsystem of an algorithm based on ey any size and time of 
existence of a conference simplifies recovery of a real-time system with high rollback cost and 
limited time reserve. Let us reiterate the main advantages of this algorithm: Elimination of the 
domino effect; reduction in rollback depth (with a guaranteed maximum); simplicity of 
determination (after discovery of a fault) of processes which are in ing and recovery points 
for the rollback; reduced number of recovery points; automation of actions related to 
recovery, which become transparent to the user; reduced number of processes rolled back. 


The “Phoenix” software package to make the OS RV real-time operating system fault 
tolerant. The most common multitasking operating system for SM-4 control computers, capable 
of operating in real time mode, is OS RV. It is this operating system which is recommended for 
use at the upper levels of automated process control systems and ASU GPS. 


OS RV contains an extensive set of test facilities (tests for hardware devices, capture of 
synchronous system interrupts from tasks, stack and memory protection, error recordi 
facilities), but their use for fault tolerance purposes is difficult, requiring a high level 7 
programmer qualifications, or quite impossible. Thus, the need has arisen to develop sup- 
plementary software facilities to facilitate and partially automate the development and im- 
plementation of fault-tolerant real-time control systems. These facilities might be provided in 
the form of a software package, a superstructure above OS RV, with the following properties: 


— Ability to utilize standard OS RV test facilities; 


— provision of supplementary test facilities for both hardware and software; 
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The “Phoenix” package uses the rollback strategy to restore normal computer system 


functioning. If & fault is detected, the package automatically calls the recovery handler 
appropriate for the fault. s detected, the, Pas nn described by application POST vo th 


K: REMOVE TASK 


REM TASK; 
PIP /NV=DK2:TASK.TSK; RECOVER PATTERN 
” RESTORE TASK IMAGE FROM RESERVE COPY 


INS TASK; INSTALL TASK FROM RESERVE COPY 
RUN TASK; RESTART TASK 


If a recovery point was set, the task is restarted from it. 


The “Phoenix” package also implements & centralized coordinated rollback strategy for 
em of conferences with limited numbers of participants. 









Using the “Phoenix” package regulates the actions of — * providing fault tolerance 


during development of application programs, requiring that t 
providing fault tolerance. The package also includes a debugging operating mode and can be of 


significant assistance in debugging programs. 


The is written in assembler and can be used during development of programs in 
FORTRAN, P CAL or macroassembler under OS RV. In operation, the package occupies 
about 10 K of main memory and requires a small percentage of processor time. 


Experimental operation of the package has demonstrated that it neutralizes most faults 
characteristic of OS RV on the SM-4 control computer. 
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Text] The creation of flexible and powerful software systems on the YeS computers, satisfying 

numbers of users with various levels of training and different requirements, as well as 
better adaptation of the operating system (OS) to the requirements of a specific user, demands 
facilities allowing the OS and its components to be adjusted without making changes to its 
modules or influencing the operations of other users. 


An interesting method for replacement of access method programs was suggested in'. This 
method allows servicing of nonstandard input-output devices with standard facilities (for 
example, using the stan printer output facilities provided by any programming language to 
organize output to a terminal or any other device); it is also possible to examine the output file 
of a task at a terminal before the task is completed, sometimes quite useful for debugging of 
programs with long computation times. An example was presented in! of the use of the method 
to organize a library of procedures, and this list of applications can be continued. However, as 
the authors noted quite correctly, the method they suggested does have a significant 
shortcoming, in that it cannot be used to replace resident access method modules of OS ES (due 
to the peculiarities of the IDENTIFY macroinstruction), nor for OS YeS in SVS mode (in this 
mode all access method modules are resident). 


A method was suggested in? for OS YeS p interception, based on or hes 
interrupts accessing the supervisor (SVC interrupts) by a preprocessing program. is met 
eliminates the limitations of the rt ow: of' and provides a somewhat broader list of capabilities. 
However, it also has defects. First of all, the preprocessing program must process all SVC 
interrupts, not just interrupts with codes 6, 7, 8 and 42 (the macroinstructions LINK, XCTL, 
LOAD, ATTACH) and although processing of the “other” interrupts requires no more than 8-10 
instructions, considering that the number of SVC interrupts is quite high, the operation of the 
OS is noticeably slower. Secondly, many OS YeS measurement monitors, such as*, also use the 
idea of a preprocessor, and simultaneous operation of two preprocessors in the OS is undesirable, 
since it doubles the time loss, and also the slightest inconsistency may cause undesirable effects 
in the operation of the OS. 


This article a method of individual OS adaptation combining the simplicity and 
correctness of the first of these methods and the universality of the second. The method 
suggested can also be used and is presently being used in a number of cases, for example: 


— To organize visual observation of the course of a computing process during debugging of 
complex systems; 


— to organize coprograms and data exchange through “internal” files; 


— for operations in higher-level languages with input-output devices not provided for. 
— to construct convenient processing procedures based on OS YeS utilities. 
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The idea of the method te gr danlien to Dah of but some of the peculiarities 
of the data set (OPEN) and load module into memory (LOAD) macroinstructions are used 
to avoid the limitations inherent in’. The hm for interaction of the OPEN and LOAD 
macroinstructions when a data set is is rather complex, but for our purposes the 
simplified plan outlined below is sufficient. 


The OPEN macroinstruction: 
— The access method and usage mode are determined from the data control block (DCB); 


— the input-output program of the access method is loaded by means of the LOAD 
macroinstruction; 


— the address of the input-output program is placed in the DCB of the data set being 
opened. 


The LOAD macroinstruction: 


— Checks for the presence of the load module in the area assigned to the task (this fact was 
used in‘), in the task library (task point), in the OS YeS common area (LPA), in libraries in the 
list contained in the LNKL segment of the SYS1.PARMLIB library; 


ae the module when found into memory or generates an error message if the module is 
not d. 


In the task area or OS YeS common area, a physical load of the module does not occur, but 
rather the access counter of the module is incremented. 


We can see from this module search algorithm that if a program with the name of the 
access method load module is placed in the task library, when the LOAD macroinstruction is 
executed this program will be loaded rather than the resident module from the LPA. 
Furthermore, using this method we avoid the IDENTIFY macroinstruction and, consequently, 
eliminate all the limitations of method’. 


Thus, to replace an access method program with another, we need but place the 
replacement program in the personal load module library under the name of the system module 
to be replaced and, when the user » starts execution, indicate the personal library in a 
DD statement with the name STEPLIB. When the OPEN macroinstruction is executed, the 
program from the personal library wll be loaded in place of the system access method module. 
However, we must recall that the access method imitation program must be roentrant (if the 
user program does not utilize the capabilities for asynchronous execution of input-output 
operations, the access method imitation program need not be reentrant, but it must be flagged 


as such during linkage editing). 


We would also like to note some aspects of the implementation of the method, resulting 
from the specifics of access method module functioning. In practice, it is most frequently 
necessary to replace BSAM and QSAM sequential access method modules, and therefore we shall 
discuss them in more detail. 
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When an access method is replaced, as was quite properly noted in', it makes sense to 
insert the parameter DUMMY in a DD statement, to avoid distribution of memory in the 
working volume for the data set and reduce task initiation and/or completion times. In this 
case, the module IGGO19AV should be replaced, i.e., the access method imitation p must 
be written and placed in the task library (task point) under the name IGGO19AV. The 
parameters passed to the access method module in the general purpose registers usually depend 
on the operating mode of the PUT (GET) macroinstruction. They can be examined by printing 
out the PUT (GET) macroexpansion by setting the GEN parameter in the PRINT operator. 
However, and this is quite important, there is another problem which was unfortunately not 
discussed in'. The IGGO19AV module has a nonstandard structure for OS YeS and looks like: 


IGGO19AV CSECT 


DC A PUT program address 

DC A PUTL program address 

DC A GET program address 

DC A CHECK program address 

DC A() IOB address 

DC A BSAM entry address 

DC A CNTRL entry address 
PUT EQU ‘ 

END IGGO19AV 


Obviously the access method imitation program must also have the same structure, 
otherwise the OPEN macroinstruction will not work correctly. 


There is yet another peculiarity relating to both of the access methods in question. If the 
access method imitation program itself does not perform “real” input-output operations (for 
example, when coprograms are organized), no difficulties arise; otherwise, one must be concerned 
with opening data sets and requesting memory allocation. Of course, the access method 
imitation program may contain a flag and upon first entry open sets and allocate memory, 
skippirg this operation upon later entry, but this requires additional testing each time the access 
method imitation program is entered, which decreases the effectiveness of the program. It is 
better to write a program monitor which will: 


— Receive in the PARM field of the EXEC operator the name of the user program and 
PARM field information for it; 


— load the access method imitation program; 


— open the data sets required for operation of the access method imitation program and 
request the buffer pool and operating areas; 


— place the addresses of the requested areas and data control blocks (DCB) of the open 


we 4 a memory area available to the access method imitation program (possibly within its 
y); 
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— start the user program with the rights of a monitor subtask; 
—- when the user program terminates, close the data sets and release the memory allocated; 
— use the EXTRACT macroinstruction to determine the user program completion code; 


— terminate operations with the same code as the user program (either by placing it in 
register 15, or by means of the ABEND macroinstruction). 


This approach not only avoids each time an input-output operation is performed, 
but also solves the problem of closing the data set and releasing memory after all operations are 
completed. 


This method is particularly convenient when writi ting dialog programs in high-level 
languages, since a printed line is handed to the access method imitation p after it is fully 
formatted and the user need not be concerned with data conversion, since is ae by 
the standard output formatting facilities of the language. 

The author has used this method many times to write dialog programs and catalogue 


procedures, to organize interaction with BS /7920 stations, etc. 
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Dynamic Terminal Redistribution In Os YeS 
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[Article by V. A. Akulov, Yu. Ye. Klepikov and V. A. Kozlov] 


[Text] Users of the Os YeS operating system (MVT and SVS mode) have at their disposal 
many different interactive systems, including P US, JEC, DUVZ, etc. The problem of 
dynamic redistribution of terminals among these systems, i.e., “disconnection” of a terminal 
from one interactive system and its “connection” to another, with a possible later return of the 
disconnected terminal, is a typical problem at many computer centers. Also there are typically 
terminals not presently in use, but which cannot be transferred to another interactive system, 
since they have already been distributed. 


This redistribution is usually performed when the interactive systems stop active operation. 
Each such reloading causes nonproductive expenditure of machine time and results in user 
downtime of 5-7 minutes. 


Resources (main memory, peripheral devices, data sets) are distributed in OS YeS in the 
task initialization stage. The resources thus distributed become unavailable for use by other 
tasks until the task to which they are assigned completes running. 


Whereas this type of resource distribution is suitable for most tasks, it creates serious 
inconveniences for terminal utilization, since dynamic redistribution among tasks in simultaneous 


operation is impossible. 


The basic information on the functional purpose, technical characteristics, capabilities and 
current status of devices, including terminals, is contained in the system block UCB (device 
control block). 


One of the simplest methods of dynamic redistribution of terminals is to change the 
contents of the UCB" ?. If certain conditions are met, this method is effective for the OS?. 
Based on this method, the authors have developed a “dynamic peripheral device reconfiguration 
monitor,” which meets the following requirements: 


— Independence with respect to active interactive systems (in contrast to*); 


— ability to be present in memory only at the moment when system blocks are modified (in 
contrast to”) and to complete operation independently of the interactive systems; 


— centralized accounting and storage of data on terminal status; 


— ability to manipulate not only individue: terminals, but also groups of terminals in a 
single operating cycle (in contrast to’). 


The monitor is designed for dynamic redistribution of local YeS7066, YeS7927 and YeS7063 
terminals in YeS7920 mode among interactive systems in the OS YeS environment. Operation 
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of the monitor is controlled in dialog mode by entering monitor instructions at the computer 
operator’s console. The monitor recognizes the following instructions: 


O — logically disconnect a terminal or group of terminals from an indicated interactive 
system and them to on-line status; 


F — release a device or group of devices with indicated addresses, shifting them to on-line 
status; 


R — logically reconnect a terminal or group of terminals, previously disconnected from an 
interactive system by the O instruction, restoring their status at the moment they were 
disconnected; 


S — logically switch a terminal or group of terminals from one interactive system to 
another; 


P — delete previously stored information on the status of terminals for one or several 
interactive systems from the list; 


L — send data on the current status of terminals for one or more interactive systems to the 
operator’s console; 


H —send information on the composition and structure of the monitor instructions; 
EOJ — end monitor operation. 


When terminals are dynamically redistributed, information on their current status is 
preserved in a special memory area, the “reference list.” When the monitor is loaded, this list is 
kept in main memory, when the monitor finishes operations the list is copied to peripheral 
—** (as a data set on magnetic disk). Normal functioning of the monitor requires 30 kbytes 

M. 


The monitor dynamically redistributes terminals only among interactive systems using 
standard access methods (GAM, BTAM, TCAM), supporting the system control block structure 
used in OS YeS (TCB, TIOT, UCB) and standard interactions among them. 


The process of starting an interactive system is as follows. First the basic interactive 
system IS, is started on all terminals. Some of the terminals are released by the monitor 
instruction O, and interactive system IS, is started in these terminals. Subsequently, these 
terminals can be used for IS, and IS,. A monitor S instruction is used to switch a terminal (or 
terminals) between the systems. In case of an emergency termination of one of the interactive 
systems, the users of the other interactive systems continue to operate, since the integrity of the 
operating system is not disrupted. This method can also be used for larger numbers of 
interactive systems. 


The functions of the computer operator using the monitor are as follows. The computer 
operator starts and controls operation of the monitor by entering instructions. Since the 
operator can always output the monitor command structure at the console (by means of the H 
instruction), and the correctness of his actions (responses) is always rigidly checked by the 
monitor, its use presents no difficulty to the operator and does not increase his workload. 
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The results of using the monitor at several computer centers under OS YeS (version 6.1, 
re ut coe ne ena Snr 


The “dynamic peripheral device reconfiguration monitor” program was deposited with 
OFAP in 1985 * 4269-OF AP). 
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[Article by G. S. Serykov, A. G. Zyryanskiy and A. D. Savchenko] 


[Text] The increase in volumes of information processed and the number of users at the 
computer center of the Institute of Cybernetics, Ukrainian Academy of Sciences, has increased 
the need to organize and maintain an automated user archive as an independent level in the 
hierarchical memory system of the computer system. 


In spite of the significant number of disks which can be accessed at the computer center, 
the demands for disk storage have not decreased. The large number of disks requires 
expenditure of nonproductive time in exchanging disk packs during execution of remotely and 


locally loaded application packages. For example, the number of disks used by software _ 


packages each day has risen greatly (Figure 1) and resulted in a reduction in multitasking and a 
decrease in computer system throughput in general. A study of the magnetic disks at the 


computer center has shown that a high percentage of all data sets consists of library and 
sequential files, 80% of which could be stored in a shared automated archive. 
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Use of Magnetic Disk by Batch Tasks. 1, Number of tasks using 
magnetic disks; 2, number of tasks read. 


To support effective access to user source and object modules both in the interactive 
debugging mode and for “quick package” operation without interchanging magnetic disks, the 
computer center has developed a technology and supporting software to organize the ARKHIV 
automated application software package archive using the library service system. 
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This system is designed to store and retrieve information and supports effective man- 
agement of user data. One component of the library service system is its main file — a 
distributed storage area on disk (or tape), where symbolic text is recorded in compressed form. 
Each main file consists of one or more modules. A module is a set of data records and their 
related control information. 


A main file on disk is a set of direct access method data consisting of blocked fixed-length 
records. The number of main files, block size and number of blocks are determined as each main 
file is planned. 


A main file on tape is a sequential data set located on magnetic tape. All data stored in a 
main file are located on tape and copied from one tape to another as they are processed. 
Modules are organized on each tape in increasing alphanumeric order by module name. 


Three levels were defined as the archive was planned (Figure 2): The first two levels are 
the operational archive, while the third level is a long-term archive on magnetic tape. The main 
factor considered in determining the location of user data at the proper level is the data access 
frequency. The first level operational archive contains modules with which the user works 
actively over a predetermined time period (for example, one week). 
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Functional Structure of Archive. 1, Remote batch processing 
system; 2, ARKHIV application software package; 3, copies of main 
files on magnetic tape; 4, first level main file; 5, second level main 
file; 6, magnetic tape archive; 7, main file backup for first period. 


At the end of the first period, the contents of the main file (OF1) and user activity are 
determined. These data are then used to make a decision concerning transfer of some of the 
modules to the second operational archive level (OF 2). 


At the end of the second time period (for example, one month), the contents of the second 
operational archive level and user activity working with data at the second level are determined, 
and used to make the decision to transfer some of the modules to the third level archive on 
magnetic tape for long-term storage. 


At the end of the first and second periods, the volume of memory which must be released 
(N,) in main file OF1 or OF2 is determined, considering its filling at the end of the current 
period, the intensity of user interaction, and the length of the plan period (Figure 3). 
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N - Main file volume (number of tracks) 

Ny - Main file contents at beginning of current period 
Ny - Main file contents at end of current period 

~ Number of tracks to be released 

~ Number of tracks unused in current period 

~- Hemory space reserved 


Schematic Diagram of Main File Structure. 
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Figure 4 shows the variation in effective main file use as a function of its filling rate by 
users and the length of the filling period. 4 ewe seanp Pcie Mere dy ate hs 
period correspondingly decreases. The dotted lines show effective selection of a period 
each example. The main file filling time depends on the size of the main file, the number 
users and their main file usage intensity. The intensity of usage of the main file is not constant; 
in order to smooth fluctuations and remain within the boundaries of the 
storage reserve N, is maintained. 
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Naturally, an attempt is made to see that the number of main file tracks not used in the 
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Use of Main File as a Function of Its Filling Rate. 1, Filling factor; 
2, cylinders per day; 3, days. 








Figure 5 shows the sequence of processing of user requests for retrieval of archive data. 
This technology provides rapid access to the data frequently accessed by users, requiring extra 
time to retrieve long-term storage data. 
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Processing of User Requests for Data Access. 1, Data transfer in 
response to requests; 2, user requests; 3, first level main file; 4, 
second level main file; 5, requests; 6, magnetic tape archive. 


The computer center of the Institute of Cybernetics, Ukrainian Academy of Sciences, has 
developed an interface with a time-sharing system supporting dialog interaction of users with the 
ARKHIV software package. Additional capabilities for sanctioned access to user data are 
supported. The group processing functions of modules are expanded, and modules with the same 
names can be stored. The ection of statistics and analysis of the main file status are 
automated. We list below the command functions implemented in the ARKHIV software 


package. 


nr 


Write, read, delete, change characteristics of a module in the main file. 
Determine characteristics of a module or list of user modules. 

Print a module. 

Record library data set segments in the main file. 

Replace main file module with library data set segments. 





Select modules from the main file per characteristics. 
Control message output. 


Generate a date stamp. 


- FF FF FF FP FP 


Generate a list of library data set segment names. 


— 
2 


Output a list of instructions and their modes of execution, authorized for the user. 


Generate reference information. 


— 
om 
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12. Redefine an input instruction sequence: Sequential data set, main file module, central 
console. 


Batch mode access to the system supports storage of large volumes of data in the archive, 
with the instructions controlling information processing in the input stream. A user operation 
protocol is produced as a library data set segment, or sent to the system output. 


When operating with the ARKHIV software package by time sharing, input of instructions 
and output of messages and results are performed directly through the user’s terminal. 


The technology for maintaining the automated archive includes several stages of procedures: 
— Creation of the main file; 

— filling of the main file in on-line or batch mode; 

— storage of the main file over a predetermined period; 


— daily collection of statistics on the functioning of the archive, used to make decisions 
concerning transfer of modules from the operational archive level to long-term storage; 


— transfer of information to the main file from magnetic tape on request; 
— recovery of the main file. 
The technology supports: 


— Multilevel organization, allowing both operational access to data and requests for data in 
long-term storage on magnetic tape; 


— storage of large quantities of data, data compression, protection of data access; 

— documentation of data modifications, storage of information on modules; 

— access to data from user application programs and application packages; 

— effective data management: Storage, reproduction, recovery; 

— generation of statistical data are various detail levels concerning operation of the archive, 
with generation of decisions based on these data concerning the level of filling of the archive, the 
possibility of transferring data from one archive level to another. 


The use of the ARKHIV software package has liberated more than 60% of the disk memory 
and allowed effective data archive management. 
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UDC 658.5.001:658.514:681.3.01 


Use of Data Collection and Preparation System Based on SM-1 Control Computer in 
Operations-Production Planning Subsystem of Enterprise Automated Management System 


81440014 Kiev UPRAVLYAYUSHCHIYE SISTEMY I MASHINY in Russian (manuscript 
received 08 Aug 86; after revision 25 Jul 87) No 3, May-Jun 1988, pp. 43-45 


[Article by S. M. Grigorov] 


[Text] The timeliness and quality with which management decisions are generated in the 
operational-production geo, pn sgn of an enterprise automated management system 
depend to a t extent on the speed and reliability with which data are entered into the 
computer. The technology used for this process at most enterprises assures slow management 
system reaction time. Usually, primary documents (accounting cards, receipts, invoices, etc.) are 
sent from subdivisious to the computer center, then the information from these primary sources 
is transferred to machine-readable media, or copies of the documents on punch tape generated as 
the primary documents are filled out on special equipment such as the RP-70 and RI-7501 are 
sent to the computer center. In either case, the data must be verified and corrected if necessary. 
This is followed by computer input and processing, after which the results must be delivered to 
the points where production is actually controlled. 


The time cost of these procedures depends on the volume of information and the extent to 
which it is prepared for machine processing. In large enterprises, a daily cycle is typical, with 
documents sent to the computer center at the end of the first shift, verified and transferred to 
machine-readable media during the next shift, and processed in the third shift. The results are 
returned by the beginning of the first shift on the next day, after which they must be analyzed, 
serving as the basis for management decisions. This algorithm does not consider errors in input 
information which may not be found, or errors introduced at any stage in the process, leading 
either to incorrect decisions or to reprocessing. Obviously, neither situation satisfies production. 


In practice a management decision, though not always well-founded, is made significantly 
earlier. The automated management system, particularly the operational-production planning 
subsystem, has little impact on the management loop and the material and labor resources 
expended do not yield the desired effect. 


Thus, the pressing nature of the problem of decreasing automated management system 
reaction time while increasing information reliability and simultaneously decreasing labor 
consumption in the data collection process is obvious. It is virtually impossible to solve this 
problem without creating a task-oriented hardware system which would allow information to be 
input throughout the working day as it is generated directly at working locations, rigidly 
verifying the input process, performing simple processing and outputting results at the point of 
application in a mode as close as possible to the actual flow of the controlled process. The use 
of such a system could minimize the probability of errors, liberate data input operators at the 
computer center, reduce labor consumption of the entire process and allow data to be generated 
concerning the course of the production process at any time. 


Many enterprises in our country (KamAZ Association, the Nizhnetagilsk Metallurgical 
Combine, etc.) are now using a data collection and preparation system based on an SM-1 control 
computer, which largely satisfies these requirements. The system includes a somewhat expanded 
SM-1 plus data transmission equipment to provide communications with information display 


76 








panels directly in the production shop. Communications between the central computer and these 
displays are by dedicated telephone lines through the plant exchange. The maximum distance 
from the computer center is up to seven kilometers, with up to eight displays connected to a 
single telephone line. 


The total number of network users is determined by the technical capabilities of the 
computer, the operating system used and the complexity of preliminary information processing. 
As a rule, the number of displays simultaneously controlled is not over 32 (at KamAZ). 


The most commonly used displays are the RI-6401 and RI-6402. The capabilities of the 
latter model are somewhat expanded by inclusion of a “Konsul” input-output device. In 
addition to keyboard operations, both models allow data to be input from a standard punch 
card, with visual monitoring and editing off line. The “Stroka-190” printer used with the 
RI-6401 base model was not found to be successful and is therefore not provided or is replaced 
by a more reliable device of the same type manufactured for use from the “ELKA-55” Bulgarian 
calculator (manufactured by “Izhmash”). Communications over standard telephone lines are 
supported using APD-MPP data transmission equipment. The communications lines from the 
displays converge at the telephone exchange, and are combined into group channels which are 
connected to the computer through central exchange data concentrators. 


It should be noted that this connection does not agree with the technical conditions for 
operation of the APD-MPP equipment, although with moderate traffic levels the equipment 
operates quite satisfactorily, with operator intervention required no more than two or three 
times per day for a transmission rate of 4800 Baud. When traffic is heavy, “receive” mode may 
be briefly blocked upon completion of “transmit” mode operations, resulting from the 
half-duplex operation of the APD-MPP equipment. The block signal is not sent to the display 
panel, creating the illusion that the panel has failed and causing operating personnel working 
with the devices to complain justifiably. 


The SM-1 minicomputer has well developed software based on DOS ASPO and DOS RV 
for the creation of software-hardware systems capable of taking over a large portion of the 
routine functions of the supervisor section of a large shop or an entire production facility. 


This type of system has been implemented at the “Izhmash” association motor vehicle 
plant. It is designed for timely accounting and monitoring of the course of production as a part 
of the plan-supervisor service. 


The software, based on DOS ASPO, was developed for an information network consisting of 
24 type RE-6401 displays. At present, four displays are in operation in two shops, supporting 
the main assembly conveyor. Work is now under way to connect five additional shops (10 
displays). The system operates in basic production mode — 16 hours per day. In particularly 
heavily loaded sections, in order to assure complete reliability, displays are duplicated, which 
does not require additional communications lines. 


Information collection is organized according to the model data input principle. The 
constant information for each shop, including the characteristics of a part or assembly unit, its 
path in the technological cycle, etc. is coded on punch cards. Files of 300-700 punch cards are 
created and periodically altered within the shops. The recording procedure consists of reading a 
punch card and indicating by keyboard input the volume of the batch of parts transmitted. This 
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work is performed by the shop supervisor, and is usually not the most important responsibility 
on his list of duties. The result of this operation is entry of the information on 
machine-readable media and printing of the accompanying document at the point where the 
information was recorded. The time required to perform one operation, including locating the 
proper punch card, is not over 40 seconds, allowing the peak load at the middle and at the end 
of each shift to be managed. The intensity of operation of some of the information sources at 
this time is as high as 75 messages per hour, with a total information volume of 270 messages 
per shift. 


The input is rigidly checked for syntax errors. Erroneous input is rejected, with an 
appropriate message and invitation to repeat the entry. Semantic checking is the responsibility 
of the human operating the display, who is provided with a broad arsenal of editing capabilities 
both during the shift and during any day of the current and following month. Naturally, this is 
done only with the permission of the planning-supervisory department. 


The number of available standard inputs is quite great, allowing data to be input not only 
for timely monitoring of the course of production, but also, for example, data on standards and 
reserves of materials, their consumption or the organization table. There are seven models in 
this system, two of which are service models used to test the displays and their individual 
components without disconnecting them from the central computer. 


Information sent over the communications channels is recorded on magnetic disk and 
duplicated on magnetic tape to allow rapid data recovery in case of failure of a disk drive or 
other problem during subsequent processing, even at the highest functional level of the 
automated management system. At the same time, documentation is printed out at the 
information display, i.e., at the point where information is generated — an invoice in two copies. 


The operation of the entire system is monitored by a single operator, the computer center 
supervisor, along with his primary duties. In particular, on request by interested services he can 
output the information stored during a given portion of a day in the YeS computer, where the 
major preparation of the enterprise operating summary is performed. The time spent on this 
procedure is not over one-half hour. It is usually performed three times per day so that shop 
supervisors can be provided with reliable information before their shift begins. At the end of the 
day all accumulated data are output to the automated management system data base for use by 
other subsystems. Communications with higher level computers are supported through exchange 
of magnetic tape. 


A supervisor system with a similar data collection section has been put in experimental use, 
managing a finished product storage area at a tool production facility. This system performs the 
following tasks: 

— Creation and management of an internal data base; 

— input of operational information; 

— editing of the internal data base; 


— generation of output documents with standard formats; 


— generation of reports on user request in dialog mode, including incomplete request forms. 
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The software runs under DOS RV-2, the main advantage of which over DOS ASPO is the 
ability to swap active tasks, i.e., essentially an — 2* mode with practically unlimited virtual 
memory, quite important considering the limited RAM capacity of the SM-1 computer. This 
significantly expands the range of tasks performed directly in the minicomputer, and will allow 
easier increases in system capacity, particularly following the planned shift to a more modern 
type SV.-1210 computer. 


The data collection devices used are four type RI-6402 displays connected in a radial 
network, while the remote access devices used for the internal data base are two type DM-2000 


displays. 


This network structure increases the throughput capacity of the communications channels 
and significantly improves the viability of the entire system by minimizing the influence of 
APD-MPP switching time from transmit to receive and vice versa in half-duplex mode. The 
general contractor for development of software is “Uralsistem” Scientific-Production Association, 
whose specialists have a t deal of experience in developing supervisor systems of this class. 
Unfortunately, Ho) Bel ganar octet of specialized hardware systems for remote collection and 
processing of operational production information, construction of middle-level supervisor systems 
such as the YeSTEL system with new generation peripheral equipment such as the SM-1604 and 
SM-1605, manufactured in Bulgaria, has still not been undertaken in our country. This 
situation forces us to adapt various hardware and software facilities for these purposes, which is 
not always possible at optimal cost. Doubtless, such systems should be based on the SM 
computers, allowing the creation of inexpensive, in many cases independent and quite flexible 
automated management subsystems, thus improving the effectiveness of automated management 
systems and, as a result, improving the effectiveness of production. 
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[Text] The extensive use of YeS computers as shared access machines makes the development of 
a methodology and software for accounting for machine resource utilization a pressing task. An 
accounting subsystem should perform three types of tasks" *: 


— User accounting; 
— reporting of the user load based on various characteristics; 


— estimation of the usage effectiveness of an installation and determination of bottlenecks 
for future optimization. 


The difficulty of the task results from the essentially multitasking ideology of the YeS 
computer operating system. Most accounting subsystems use as their information source the 
records generated by the system monitor program’, the essential shortcomings of which” ‘ 
generate additional difficulties. 


This article describes the ideas forming the basis of a subsystem for accounting for certain 
machine resources developed at Donetsk State University, distinguishing this subsystem from 
others developed earlier. 


System structure. All previously developed accounting subsystems (in any case, those 
known to us) have some pretentions to universality. However, almost always when such 
subsystems are introduced at a specific computer center, the software or data processing 
technology used at the computer center (or, still worse, both) must be changed. The reason is 
that the accounting subsystem, in addition to accounting itself, must perform the functions of 
generating initial information and printing out resulting documents. This makes the structure of 
the accounting information, as well as the composition and form of output documents, relatively 
rigid. This rigidity differs in various subsystems, but is always present. 


This rigidity can be decreased by separating the aspects — the accounting subsystem 
performs only the accounting function, while the structure of the input and output information is 
determined by resources which are external to the accounting subsystem. Information on the use 
of machine resources over a given time interval can naturally be accumulated in one of the data 
bases used at the computer center. With this approach it is just as natural to use DBMS 
facilities to determine the composition and structure of the input and output information. 
Introduction of such a system requires minimum expenditures. 


The subsystem we describe is constructed as follows. Two functionally separate parts are 
distinguished — we call one of these the input task, the other the output task. The input task 
extracts necessary information from system monitor program records, sorts them and enters the 
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information in the data base* '. An operational summary is also formatted and printed, a table 
containing information on all tasks executed in a shift (something like a machine journal). 


We utilize the INES DBMS, the most convenient for the Donetsk State University 
Computer Center. The tree of the data base includes embedded key files. The keys are the 
computer type, OS, user accounting information, year and month. The leaves contain data on 
the use of such resources as central processor time, disk access, punch cards read, lines printed, 
etc., plus an overall characteristic — commercial time. 


This information is stored for some time (at least one month). When a job by a certain 
author is first executed, it is automatically recorded in the data base by the DBMS. In other 
words, a new branch on the data tree is created, and the values of the characteristics mentioned 
above are recorded on its leaves. If the author of the job is already recorded, the values of the 
leaves are modified. 


Entry to the data base is performed using the INES DBMS input model system (any other 
DBMS could be used — hierarchical data organization is not necessary). In this stage, the 
structure of the accounting information is insignificant — it is simply used as a key®. The entry 
task can therefore be run at any computer center with any accounting information coding 
method already in use without modification. Furthermore, by removing the call to the INES 
analyzer (used to write to the data base), the input task can be used independently to generate 
the operational summary. Experience has shown that in some organizations this machine 
document is quite sufficient. 


The second part of the subsystem, as we noted, consists of the output task, i.e., generation 
of output forms for various subsets of users, departments, subjects, etc., or for the system as a 
whole or the installation over a certain (usually predefined) accounting period. It is assumed® 
that, using the facilities of a well-developed UBMS (in this case INES, more precisely the query 
and model output system), the required set of output forms can be easily obtained, 
based on the specifics of each computer center. Actually, the query system allows selection of 
data in the data base, interpreting key subfields in a wide variety of ways. The authors have 
developed a set of output forms considering the peculiarities of the operation of a computer 
center at a large higher educational institution in accordance with the structure of educational 
information used. Since the introducing of the subsystem, the information processing technology 
at the computer center has changed several times and new requirements have been set for output 
forms; in particular, requirements for new forms have been generated; each time these tasks were 
performed at minimal expense. 


Commercial time. Penalties. The basic characteristic of the utilization of computer 
resources by tasks is the so-called commercial time. This characteristic is computed as a 
function of all the basic resources utilized by a task and is a more or less objective characteristic 
of the task, little dependent on the conditions under which it runs (i.e., on multitasking level, 
computer operator experience, etc.). However, the specific composition of resources accounted 
for, type of function and weight coefficients are not the best of all possible characteristics; these 
problems ave worthy of individual and detailed analysis from the economic standpoint. 


We note, however, that waiting time is not a characteristic of a task (since it includes 
waiting time for both its own and for outside events and, still worse, computer operator reaction 
waiting time), and is therefore not accounted. 
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In order to stimulate efficient utilization of computer resources by users, a system of 
penalties is used. Improper utilization of memory and class assignment is penalized (at a 
percentage of commercial time). 


Furthermore, a user pays (in units of commercial time) for memory requested in the job 
control | e operator, as well as the difference between the average memory allocated and 
actually used (if the difference is positive). Mean allocated memory is computed by the equation 


Ny 1 Ne 
M, = (> cuia) |( J tu] ; 


while mean utilized memory is computed by the equation 


N 


Np 1M 
Lp = (2 bute) (> i) : 


where a,, is memory allocated at point iin a task; ),, is memory in use at point i in the task; 
t,, is the time of execution of point i of the task; N, is the number of points in a task. 


Based on such objective characteristics of a task as the central processor time, number of 
input-output operations and volume of memory required, an agreement on task classes has been 
developed. It determines the mixture of initiators used with predetermined priorities. The 
agreement has been reduced to a list of all users, and in order to monitor its observation, the 
input task computes the class based on the actual utilization of resources, printed in the 
operational class summary, indicated in the JOB operator of the job control language, or the 
recommended class if it does not agree with the recorded class. Furthermore, in case of 
disagreement, a task is penalized in the form of a percentage of commercial time. In MVT mode 
this is apparently the only method which can force users to state their class properly. Users can 
learn the proper class to be assigned to their tasks by reading the operating summary. 


Since the accounting system here described was introduced, the penalty system has yielded 
positive results. Thus, over the past year of functioning of the system, the memory utilization 
factor for j randomly selected tasks, calculated by the equation 


J 


| Woe 
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where 50 has decreased by half (from 0.11 to 0.056). 


We have not estimated the effect of the class agreement and penalties for failure to observe 
it. We note, incidently, that introduction of the accounting system and all related steps has 
increased, for example, the mu!tikasking coefficient of the YeS1022 computer by 14% (comparing 
characteristics for the first and 15th month of functioning of the system). 
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Individual access mode. There are at present two main machine resource access modes on 
the YeS computer — batch and dialog. At many computer centers with insufficient equipment 
capacity and, as a result, scheduling of computer operation, one or more users are allocated all 
resources (i.e., the entire installation) for monopoly use for scheduled time periods. The user ves 
group of users) can operate in batch or dialog mode during these time periods. We call this 
operating mode individual. 


A user who has received permission for operation in individual mode is allocated a certain 
time in the schedule. During this time (which we shall call the individual access interval) the 
computer may actually stand idle (for example, while the user thinks over decisions) or may be 
virtually idle (while the user starts a task with the START instruction). Changes to the main 
planner allow virtual idle time to be accounted for, but only in the sense of estimating the 
effectiveness of utilization of the installation, since it is impossible to identify the user entering 
the START command. 


On the other hand, if user tasks are performed in parallel, the total lengths of the tasks 
may exceed the length of an individual access interval, which cannot be permitted. 


Finally, if the capacity of the installation is sufficient, in addition to the user operating in 
individual access mode, there may be another user, particularly a stream of batch jobs. 


In order to solve all these difficulties, we suggest that the commercial time of the individual 
access interval be considered simply the duration of the interval in the astronomical time sense. 
Separate accounting for all resources becomes senseless if monopolistic operation on the entire 
installation is imitated in multikasking mode. 


Accounting for a parallel stream of jobs is performed by the method described above. 


With this approach a user clearly notes the beginning and end of his work (his interval) so 
that the system monitor program can record it and identification of the user is not difficult. 
This can be done, for example, by the use of a task with a special name. We shall refer to such 
a task as a password task. In the system we have introduced, the first character of the name of 
a password task is the character @ (which was found to be most convenient from all points of 
view), while the remaining symbols contain accounting information. The content of the task is 
unimportant. 


The individual access interval is defined as the time from the moment the first password 
task starts until the moment when the second (with the same name) starts or until the initial 
operating system loading procedure is executed. Therefore, if for some reason a user must reload 
the operating system (for example, due to a temporary power failure), operation must be started 
by inputting his password task. 


The computer operator, monitoring the start of the password task with the name 
corresponding to the user number, is responsible for correct opening of the interval. The user 
himself is interested in correct closing of the interval. 


Accounting in individual access mode is performed as follows. The input task recognizes 
among the system monitor program records the one which corresponds to the password task. 
The commercial time of the user whose accounting information (number) is contained in the 
password task is the entire length of the interval (in the sense of astronomical time). All 
nonpassword tasks with the same accounting information (number) running during the same 
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interval do not change the “commercial time” field in the operational summary or the data base, 
but the total of their lengths determines the “task duration” field. 


If in addition to the individual access mode there is also a parallel job stream (with other 
accounting numbers), it is considered independently. Herein lies the functional difference 
between individual access mode and assigned time mode in the DKP system’, which frequently 
rejects tasks with accounting information different from the accounting information of the 
assigned time interval. 

We note also that a program and procedure in job control language allowing opening and 
closing of the interval from the operators console have been developed for the convenience of 
users. The parameters of the procedure are the number and name of the programmer. The 
program generates a trivial password task and initiates its execution. 


A sequence of system monitor program records can be similarly marked, thus sending the 
input task various types of useful information such as the name of the duty operator. 


List of data sets and archive service. The accounting subsystem, in addition to the process 
outlines, maintains a centralized registry of permanent user data sets on direct access volumes. 
The magnetic data medium administrator usually executes the following tasks: 

— Allocation and liberation of space on direct access volumes; 


— deletion of contraband data sets, i.e., those not registered with the magnetic medium 
administrator; 


— timely archiving of data sets and their recovery in case of damaged to the original. 

These operations are evtomated using a special data set in a resident system volume. This 
set, called a list, consists of records, each of which describes a user permanent data set registered 
with the magnetic medium administrator. Each record contains: 

— The registration number of the disk pack; 

— the name of the data set; 

— the name of its owner; 

— the organization of the data set; 

— the date of creation of the data set; 

— the date of last closure of the data set with the INPUT parameter; 


— the number of such closures; 


— the date of the last closure of the data set with the parameters OUTPUT or UPDATE; 
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— the number of such closures. 


Records in the list are sorted by disk pack registration number, data set name and owner 
name. 


When a newly formed data set is registered with the magnetic medium administrator, the 
administrator forms a new record in the list, entering the first three fields. The remaining fields 
are automatically generated and maintained by the accounting subsystem input task using 
system monitor program records 14 and 15. 


Simple list management programs have been developed. These programs allow printing of 
the list, addition of new records, as well as deletion or editing of old records. Examining the 
list, the magnetic medium administrator can make conclusions concerning the utilization 
intensity of various data sets. 


The select program occupies a special position among the list management programs. It 
generates on disk a data set containing the names of data sets on the volume which have been 
changed since a certain date. This list of names is sent to the input of the archive storage 
system used at the computer center. Thus, only those data sets which have been changed since 
they were lasted backed up are archived. The use of this list, together with the INES archive 
system, significantly simplifies and speeds up copying of data sets into the archive, and also 
reduces the size of the archive on magnetic tape. 
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eg General information. The MP25 macro processor (the MP25) is a member of the class of 

universal macro processors designed to operate under the control of the ASPO —s 
system on SM computers'. The MGD macro generator, the | of which is an expansion 
the basic MNEMOCODE 9g, language’, has long used under ASPO on SM 
computers. In contrast to the MGD macro generator, which may share some areas of 
application with the MP25, the latter has no limitations as to the nature of input and output 
texts. Texts may include, for example, computer programs in any programming language, books 
or a series of answers to a questionnaire. In this sense, MP25 allows maximum om of macro 
calls’. 


The macro processor has two inputs: Macro definition and input text. Each macro 
operation indicates, first of all, that which must be replaced and, secondly, what it must be 
replaced with. This is referred to as a text replacement macro. The input text is a sequence of 
letters in which replacements are to be made. If a certain set of macro definitions has been 
assigned, the first actions of the macro processor are inspection of the initial text and location of 
macro inputs. 


Each such input is called a macro call or macro instruction. The imacro processor, finding a 
macro call, determines the replacement macro text and replaces the call. The text replacing the 
macro call is said to be generated by the call. The output text is produced from the input text 
by replacing all macro which it contains. 


Free entry of macros opens new paths for utilization of macro processors. Usually a set of 
macros is defined first, then programs are written considering these macros. The MP25 allows 
the opposite sequence of operations, i.e., utilization of macros to make changes in previously 
written programs. The use of macros to replace one sequence of letters with another throughout 
an entire program is referred to as context editing. 


The need for context editing may arise under various conditions. The most common case is 
modification of programs received from elsewhere; even if written in a so-called standard 
language, it is usually necessary to make a few context replacements before a program can be 
used. For example, the rules for writing the FORMAT operator in certain dialects of 
FORTRAN allow a text line to be written as XYZ, while in other dialects it is necessary to 
write CHXYZ. Input-output operators are also frequent objects of local changes. The need for 
context editing arises also in the process of development of one’s own programs. Typically, a 
number such as 20 might need to be replaced by the number 30 if encountered as the limits of 
an array or a loop, or when a new argument needs to be added to all calls for some program. 


Macro processor operating modes. The MP25 operates in two modes: With and without 
confirmation. 








In confirmation mode, MP25 requires that a macro call begin with the special character 
“#" We should note that the MGD macro generator, which requires that the name of a macro 
be located in the operation code field, can also be considered to operate with confirmation. 


When operating without confirmation, i.e., without the warning marker, MP25 analyzes the 
input text line by line. Each macro has an associated pattern. The pattern is given as a line of 
arbitrary characters in which the formal parameter corresponds to “holes” marked with the 
parameter marker (the “*”). 


Each input line is compared in sequence with the pattern of each macro. An input line is 
recognized as a macro call if it and a pattern match precisely, character by character (with the 
exception of those places where the pattern indicates by a marker that the actual parameter 
should be located). Up to 22 parameters are permitted, which the macro replacement text 
(macro definition) can access as follows: 


&0, &1, &2,..., &9, &A, &B, &C,..., &L 
Let us look at an example, in which the input line 


ALPHA=9BETTA+GAMMA)/DELTA 
IF (AB)3, 20, 7 


is compared with the pattern 


+_(*) /* 


IF (*)*, *, * 
In the first case, the actual parameters take on the following values: 
&0=ALPHA, &1=BETTA+GAMMA, &2=DELTA 
While in the second case: 
&0=AB, &1=3, &2=20, &3=7 
If there are less than 22 arguments, the remaining arguments receive null values. 


The input line is checked by MP25 first in the mode with confirmation, and if this mode is 
not _— MP25 shifts to the mode without confirmation (i.e., performs search among the 
patterns). 


In the mode with confirmation, macro definitions can be stored in a normal character file 
on disk, which avoids the use of special macro library editing programs. If neither mode 
processes an input line, it is copied to the output text with possible macro computation, i.e., 
execution of substitutions in the process of examination of the input text. Macro definitions are 
not copied to the output text. It is sometimes necessary to forbid macro substitution within 
certain contexts (such as rows of letters) which may be similar to macro calls or special macro 
language characters. Inclusion of letters in special brackets prevents computation of letters — 
they are simply copied to the output text without the brackets. This blocking mechanism allows 
any character to be inserted in the output stream. 
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elements. Each macro processor, including MP25, has its own programming 
language, with which instructions are given and which also serves to define and convert objects 
during generation of MP25. 


The macro processor allows both local and global macro variables. The global variables are 
in turn subdivided into disk and ordinary. Global variables are required to transmit information 
from one macro call to another, while local variables are desirable for internal operations within 
individual macros. If recursion is possible, local variables are almost obligatory. Local variables 
have the following form: 


&0, &1, &2,..., &9, &A, &B, &C, ..., &L, 
while ordinary global variables are 
&M, &N, ..., &Z 


The size of a local variable is limited to 26 characters, of a global variable — to 58 
characters. In MP25 there is no special apparatus for assignment of macro variables; the 
variables, depending on context, may be literal, integer or boolean. For example, if we have the 
following variables: &1=12, &2=13, &N=TEXT, then the computation &1+&2+&N causes the 
output file to receive the line of characters 25+TEXT. Note the difference in the computation 
of the next line using the exclusion characters: &1+\&2\+&N. The result will be 
12+&2+TEXT. 


In case of a list of arguments of indefinite length, the macro call must have a mechanism to 
interpret the list. In MP25 this is achieved by means of computed macro variables, obtained 
from ordinary macro variables by attaching the character “&,” for example: &&0, &&B, &&Z. 


The MP25 macro processor allows the use of integer, decimal and octal numbers with no 
sign or with the “-” sign. The range of numbers is from -32768 to 32767. 


Using the construction, 
<macro variable> ’ <macro variable or number>, 


the user can work with indexed global disk variables. The macro variable or number following 
the apostrophe is the index of a variable (the index can be between 1 and 32767). The macro 
variable before the apostrophe may be a computed variable between &0 and &Z. Global disk 
variables have a maximum size of 26 characters and are not declared. 


It is assumed that introduction of the following special variables has expanded the area of 
use of the MP25 macro processor: &% — the number of parameters in a macro call (determined 
from the macroinstruction); &U — a unique variable (incremented with each macro call); &F — 
the input file number; &Z — the number of the current input line; &* — the input line; &I — 
the index of a line found; &L — the remainder from a division, etc. The semantics of the special 
macro variables should be clear from their names. 


Variables in MP25 may be of three types: Numerical, text and undefined. For the special 


macro variables, the type is fixed throughout the operation of the macro processor (with the 
excepiion of &*). However, ordinary and computed global and local macro variable types may 
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. In the initial state, the types of these macro variables are undefined. The type of a 
variable can be stated by adding the character “T” after the variable, for example: &0T, &TT, 
&BT. 


An MP25 user may also find it useful to refer to the length of a variable. This is done by 
adding the character “L” to a variable, for example: &*L, &2L, &LL, &&1L. The operation of 
this apparatus needs no special explanation. Thus, if &3=SPRING, then &3L is equivalent to 
writing the number 6, since the length of the variable 4&3 is six characters. 


To use the macro processor to generate lines of variable length, we must utilize the du- 
plication of macro variables. The line 


<macro variable> . <macro variable or number> 
means duplicate the macro variable the indicated number of times. 


For example, if &1=WINTER, &2=3, then the following are equivalent: &1.&2 and 
WINTERWINTERWINTER, &1.2 and WINTERWINTER. 


It is impossible to work with lines of data without a mechanism to break up a line into its 
component letters. Referring to a macro variable with a colon and two numerical parameters, 
the user can extract a substring. The first parameter indicates the starting position of the 
substring, the second — its length. For example, if &1=FINAL, &2=2, &8=3, the following are 
equivalent: &1:3:1 and N, &1:&2:&8 and INA, &1:1:1 and F, &1:1:5 and FINAL. 


To perform computations in MP25 language, we use the concepts of the operand and 
operation. The concept “operation” includes the following operations: Addition (the “+” 
character), subtraction (the “-” character), multiplication (the “*” character), division (the “/” 
character). As it reads text, MP25 always attaches the “operand-operation-operand” triplet to 
a single operand, performing the requested operation. For example, if &A=4, &B=12, when it 
encounters the text &Ax7TEXT&B-&A+3, it is converte. to the character string 28TEXT11. 


We should note that interpretation of such a triplet always results in a decimal number. 
Naturally, the user can forbid an operation with the exclusion characters, for example: 
&B\+\&K. All arithmetic operations are performed left to right with no particular precedence, 
for example &2+3x6+5/7 will set the variable &1 equal to 5. The value and type of ordinary 
and computed global (disk and ordinary) as well as local macro variables can be changed by 
assignment operators: &A=TEXT+&A+3, &B=3+14«&C, etc. The macro variable to the left 
of the “=” is assigned the computed text to the right of the “=.” The type of computed text 
will be numerical if as a result of the indicated convolution the text is reduced to a single 
number. No limitations are placed on the structure of the computed text, i.e., all macro 
variables (including special variabies) may be contained, and the apparatus of convolution, 
duplication and substitution can be used along with their characteristics. 


Another form of the assignment operator &A:=TEXT, using “:=” as the assignment sym- 
bol, is conditional and is proceseed only if the macro variable to which the text is assigned is of 
undefined type. This form of the operator is convenient for use to assign values to subsequent 
macroinstruction parameters. 
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A characteristic feature of many macro languages is full independence of the generation 
process, i.e., the user cannot change the values of macro variables from outside the language. 
This is inconvenient for debugging of macro definitions, which also must be debugged like an 
ordinary program. In MP25, the operator for communications with the user allows the user to 
interact more actively in the process of generation: 


&[<text>]<macro variable> 


The structure of the text is arbitrary and is printed at the operator’s panel after it is 
computed. In response to this message the user inputs the text to be assigned to the variable. 


Any line in a macro definition (except for a macro comment) can be marked with the 
macro flag, which can be referred to in conditional and unconditional transfer operators. 


The user can change the sequence in which macro definition records are processed, using the 
operator &+; <macro flag> or &+ <macro text>. 


In the former case, MP25 computes the macro flag and processes the operator marked with 
the flag (top or bottom). In the latter case, the operator located the indicated number of 
operators above or below the unconditional jump operator is processed. We note that in this 
case the macro processor provides a facility for a multiposition transfer using the GOTO 
operator. This is quite useful, since multiple version processing is quite widespread for 
generation of substitution text to replace a macro call. The ability to compute a macro flag 
allows the subroutine apparatus to be used. When the address of a transfer is indicated outside 
a macro definition, the next operator following the unconditional transfer operator is processed, 
allowing the programmer to detect error situations. 


By adding a relationship test to an unconditional transfer, the user can construct a condi- 
tional transfer of control. If the relationship evaluates as true, the conditional operator is 
processed as unconditional, if false — the next macro definition record is processed. 


A macro definition may be a file on disk or the input file before the first macro instruction 
which accesses it. It is written as follows: 


&(<beginning of macro definition> 
<name of macro definition> 
<body of macro> 
&)<end of macro definition> 


If the beginning of a macro definition is written as &(PA, the macro definition can be 
accessed foliowing the rules for a pattern. Otherwise, the macro call should be accompanied by 
the special character “#”. 


It is convenient to use the concept of macroinstruction embedding level. If there is no 
macroinstruction, the level corresponds to zero. If a macroinstruction is encountered as a level n 
macroinstruction is interpreted, it is at level n+1. At level one, the macro processor can 
distinguish macroinstructions written in macro definitions as patterns or written with the special 
character “#”. At subsequent levels, a macroinstruction can be used only with the “#” 
character. At level one, text is not computed, while at other levels all text is computed, even 
the names of macroinstruc.ions. 
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Unfortunately, it is not within the framework of this article to provide a full picture of the 
capabilities of the MP25 language; therefore, we note in concluding our description of the 
elements of the language that the language includes operators for copying and deleting files, 
reassignment of logical numbers, boolean and numerical transformations, macro variable input 
and transformation, etc. 


Debugging facilities. The debugging facilities allow the user to debug any macro definition 
in MP25 language, located either in a macro library or within the body of a program. These 
facilities are provided by the SOM macro definition debugger (a macro processor operating in 
debug mode) and were described in detail in*. Let us simply list some of the functional 
capabilities of the debugger: Read and write variables, record macro call breaks, record 
execution of macro definition fragments in single step and automatic modes, and if in trace 
mode, execute conditional breaks, etc. 


Use of MP25. The MP25 macro processor has been in successful use for more than six 
years both by systems programmers and by users writing application programs within ASPO for 
the SM computer. The use of the macro processor has shown that MP25 is most effective as a 
means to assure portability of programs among computer models. Portability is assured by the 
fact that macros written in MP25 represent a new language for writing and debugging of 
program algorithms, requiring only reprogramming of the macro definitions for transition to a 
different model. 


This method has been successfully implemented in planning of the #BMSP system pro- 
gramming macro library language‘, widely used to write system processing programs, and also to 
write the print format macro library (4BMFP) and the decimal arithmetic macro library 
(#BMDA). This same property of the macro processor was reflected in the creation of the AS31 
structured assembler, facilitating further automation of programming labor and increasing 
programming productivity by 5-6 times in comparison to programming in low-level languages. 
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[Text] Minicomputers presently in use in automated management systems have large volumes of 
main memory and great speed. This has reduced the significance of the problem of optimizing 
programs from the standpoint of computer resource utilization, while increasing the importance 
of reducing the time required to develop and introduce automated management system special 
software. Broad utilization of high-level languages available for minicomputers (FORTRAN, 
PASCAL) and programming methods permitting improvements in eo technology have 
greatly increased the productivity of programmers’ labor. Methods of structural, top-down and 
modular programming can be used to develop automated management system special software 
for minicomputers!~. 


In this work, we shall analyze the problem of testing connections between modules in the 


planning of programs by modular programming methods, suggest a method for testing modular 
program structure and a hardware facility to support the method. 


The process of program development by the modular programming method includes several 
stages. The first stage is decomposition of the program from the top down and construction of 
its modular hierarchical structure. 


In the second stage, the programming languages are selected for the modules in the modular 
hierarchical structure, the modules are described in the languages selected, and connections 
between modules, both data and control, are planned. This stage is completed by independent 
testing of modules and elimination of algorithmic errors. Module testing methods have been 
described in many Soviet and foreign publication such as* °. 


The third stage involves composition — of the program from the debugged 
modules, its testing and debugging. One of the most important problems in this stage is 
organization of connections among modules, which may be written in different languages, based 
on the planned interfaces. The methods for solution of this problem were descri>ed in® ’. 


Automated ——— system special software may consist of dozens of modules 
developed by a team of programmers. This leads unavoidably to errors in planning of data and 
control connections between modules. These errors are usually located in the stage of assembly 
and combined debugging of the program, since independent testing of modules cannot reveal 
errors of this type. The discovery of connection errors at this late stage in development 
sometimes has extremely unfortunate results — right up to complete replanning of the program. 
It would therefore be preferable to test the modular hierarchical structure of a program based on 
the specifications of the planned modules before independent module testing. 


The method we suggest for testing the modular hierarchical structure of a program consists 


of testing the truth of a series of statements concerning the correctness of connections among 
modules. 
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The implementation ratio, written R,, refers to the interaction ules generated 
by functional decomposition. The expressio expression mtg , then means that mis a result ot 
decomposition of module m, ‘Thus, the hierarchical structure semi M>, 
mf M, where m, is the main module of s progres, IM is a set of modules for which the 
statements are correct: 





7 3 me M|m Ram, 
¥ m; € M = 3 om, € MHC! mRam. 


Let us study the relationships among modules, ae ee 
connections. 


Transfer of control is performed when a module is called for execution. Upon completion of 
execution of a module, it must return control to the calling module. Let us represent the all 


and return relationships as R,and R, Data connections are implemented by data 
by means of parameters parameters during calle and returus, and also through nonlocal facilitis* us 
represent the relationship involved in transferring data through parameters during a call and a 


return as Rand R» The relationship generated by a data connection using a nonlocal facility 
ws Tied edit « tiseal — os R,. 


Pas age EGP CHONG SS Sney Se, the following control connection planning 
errors are typical: 


— The structure includes modules which are neve: ~alled (we shall call them isolated 
modules). The presence of isolated modules contradicts the statement following from the 
definition of the modular hierarchical structure: 


¥ m) € M = 3 m, € MAC | mRemy; (1) 


dangling references). The presence of references contradicts the statement, flowing 
from the definition of the modular hierarchical structure: 
Mm € MHC | mR-m; => m; € M; (2) 


— verticality of control is violated in a structure, contradicting the statement 
¥m,, m,€ MHC | m,Rim, = m Rim,, (3) 


where R. is the transitive call relationship, defined by the following statement: 


at 
¥ m,, m,, m,€ MHC} (m,Rim,) A (mR m,) = m, Rim. 


Data connection errors may arise during as eee © exchange of data through 
or through a nonlocal facility. At the modular hierarchical structure testing level, the 


correctness of the data connection between two modules utilising data transfer through 


— type and sequence of parameters sent and 
Vv 
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¥ m,, m, € MHC | m,REm, = Py 9, = P)", (4) 
VM mE MAC | m) RP m, wr PP Py, (5) 
where P,,,, are the data sent by module m, through parameters in the call to module mj 
“7 are the input data of module m/ received through the parameter; 


4% are the output data of module m, transferred through parameters; 


il, eee Se er eee ee eee Cee eee 
module i 


The correctness of planning of data connections using a nonlocal facility is tested by 
com the names and t of data declared in the modules as global and external 
respectively. To improve the clarity of the texts of modules and facilitate testing and 


debugging, the program developer must meet certain planning requirements’: 


— A module must have one entry and one exit, the entry point identifier must be the same 
as the name of the module; 


— variables specifying results must follow arguments; 
— global data must be declared only in the main program module. 


This last requirement allows us to define the condition of direct access to global data by the 
following statement: 


Vm EMI UO" BYerinR.m)N(O,* BIA (0 
AUG? U Of") €0,), 


where G, are global data declared in the main module; 1S are external data used in module 
m, as input-output data. 


The Kiev Institute of Automation has developed a hardware facility to su this method 
of testing the modular hierarchical structure of a program — ISP ANTES (structure analysis 
and testing). The initial information used to automate program modular hierarchical structure 
testing includes the specifications of the modules forming the modular hierarchical structure. 
The specifications of a module are developed from the text of the program and include the 
following information: Name of module, input-output parameter descriptors, global data used, 
as well as descriptors for connections with external modules. ISP ANTES consists of four 
programs written in PASCAL for DOS ASPO SM-2. 


The BAZA allows creation of a module specification data base in either dialog or 
batch mode. Then, on the information contained in the specification data base, control 
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connections are tested by the UPR program. constructs a graph of the structure 
of the am with respect to calls and checks for Ze te Gatien tees tak tail Be 
based on (1) and (2). 


Bag pide Rage pn Bec permet flee ag A ypc Bah: checks the 
nciple of verticality of control using (3). The UPR program provides the user with the 
———— 

— Composition of the module specifications data base in the form of a list of names; 

— a graph of the calls in the program in the form of a list of lines on the graph; 

— names of modules containing dangling references; 

— identifiers of dangling references and names of isolated modules; 


— loops in the control graph in the form of chains of module names which violate the 
principle of control verticality. 


If the UPR program finds control connectior .. rs, the results of its operation must be 
analyzed and the corresponding corrections made to ti. specifications data base in dialog mode 
using the specification text editor program REDAT. Control connections are tested and 
corrected again until all connection errors in the modular hierarchical structure specifications are 
eliminated. After this, data connections can be tested by the program DAN, which constructs 
graphs of data transfers using parameters with calls and returns, as well as a graph of accesses to 
main module global data, and tests data connections for each pair of modules, represented as a 
line on the graph. Testing is performed by means of statements (4)-(6). 


The DAN program provides the user with the following information: 

— Graphs of the corresponding relationship, in the form of lists of lines on the graphs; 

— pairs of modules in which data connection errors were detected; 

— pairs of modules written in different languages which have data connections. 

The results of operation of the DAN program can also be used to correct module 
specifications in the data base, which is followed by further testing until all data connection 
errors in the module specifications are eliminated. 

The specifications of modules making up the modular hierarchical structure of a 
with corrected control and data connections, can be printed by the REDAT program and used in 
subsequent automated management system special software development, as well as software 
maintenance. 
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pant Introduction. Process control tasks are frequently performed by computer systems 

microprocessor-based computers’. In this case, the size of the software used with an 
individual computer usually does not exceed 10‘ machin instructions. Studies 
undertaken in? indicate that simple technological facilities should be used for development and 
maintenance of this software. 


In this article we shall study a system of programs which represent an automated 
diagnostic system for software and program systems for the SM-1800 computer. The automated 
ee ee of certain types of logical and functional errors and the logic 
of interrupt processing, is intended for use with software written in machine-oriented 


In comparison to known testing methods” *, the automated diagnostic system uses 
methods which consist of a synthesis of symbolic, deterministic, top-down and other testing 
methods, modified in various ways. According to‘, the software is interpreted as a program 
product; therefore, the automated diagnostic system is a tool for testing of this product. The 
automated diagnostic system can locate a single error in a single pass. 


The major task performed within the automated diagnostic system is maximum auto- 
mation of the process by which a user implements procedures for test example data input and 
diagnosis of software modules and program sets. 


Logical error om Rice Me Bere fh mye BR meng 
utilization of the logical capabilities of the programming language used. Errors of this type can 
be recognised only if they lead to unsanctioned transfers of control outside the limits of a 
software module, storage of data in improper areas in memory or looping of software modules. 


The following limitations are established to support diagnosis of logical errors: 


— On distribution of modules in memory, when free memory areas must be left between 
modules, and programs and data must be placed in separate memory areas; 


— on the method of implementing standard programming procedures, such as loops, data 
r —* perfcrmance of logic functions, rules for stack use and transfer of control to other 
mc ' 


Limitations on the methods of implementing loops consist of the use of a limited set of 
loop predicates. According to®, there are three types of loops (counter, address and 
associative), each of which, in addition to other instructions, contains an assigned sequence of 
instructions characteristic for any loop of the given type. These obligatory instruction 
sequences are called the loop predicates. 
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Limitations on the method of implementing data transfers consist of the requirement to 
perform transfers in loops containing only the transfer function. This is done using transfer 
predicates, the essence of which is similar to that of loop predicates. 


Logic functions implementing the algorithm of the module must process one element of the 
input data set in one loop of algorithm operation. It is not recommended that the stack be 
used to transfer large volumes of data, but the stack address should be restored within each 
module, transfer x control to another module should be performed by control transfer 
instructions, using the stack to store the return address. 


Unsanctioned control transfer is diagnosed in two stages. Before the software set is 
loaded, the automated diagnostic system the operating area of memory with instructions 
not used in the software set which transfer control to the interrupt area. After the software set 
is loaded, the automated — system, examining main memory, composes a table of 
software module and data addresses, replacing the starting address of called modules within 
each module by the operating addresses of the diagnostic module. After this, the automated 
— system starts the software set. Each module is started through the diagnostic 

ule, which replaces the return instruction from the module with an instruction to transfer 
control to the module through the interrupt area. Therefore, in case of an unsanctioned 
transfer of control from one module to another, the diagnostic system can recognize a return 
from a module “ich it did not start. 


In the sec — stage, the software module located is processed step by step, and the 
automated diagnostic system checks each address instruction for the permissibility of the 
address generated using the memory distribution table. Thus, the location of errors leading to 
an unsanctioned control transfer is performed to the instruction where the nonpermissible 
address is generated. These facilities are also used to diagnose cases where data are written 
into nonpermissible memory locations. The limitations on methods of data transfer allow the 
automated diagnostic system to detect an error involving storage of data in nonpermissible 
memory areas. 


As each software module is started, a timer is also started and the time of operation of the 
module is recorded in the diagnostic module. The check time of a module is determined 
automatically by the automated diagnostic system using the number of instructions in the 
module and the quantity of input data. This method of determining a check time is capable of 
detecting times which exceed the normal time by an order of magnitude. With a less favorable 
relati among the hs of algorithms processing various portions of the input data, 
perhaps 1/10, and a ratio of input data processed by various software module parts of 1/100, 
for a module of 500 instructions length the check time might be 0.25 s instead of 0.025 s. The 
automated diagnostic system generates a table of the functioning of the software set, which is 
used in subsequent work. 


Functional error . Functional errors diagnosed by the automated diagnostic 
system cause the values of output quantities or their structure to fail to meet the requirements 
of the output specifications. Functional error diagnosis is performed by tracking the agreement 
of successively generated output structure elements with the elements of the output 
specification description, refined by the test example used. The process of tracking agreement 
in the automated diagnostic system is implemented by multitasking operation, with the 
software set being tested running simultaneously with a portion of the automated diagnostic 
system software performing step by step verification of the output specification. 











Diagnosis and location of functional errors are performed in stages. If in the initial stage 
by the moment a fragment of the output specification is analyzed it is found that the software 
module has several elements which do not meet the requirements, the 
multi interval is reduced and the software set is restarted. Tuis process 5 
repeated until just one fragment fails to meet the specifications. At this point the automated 
diagnostic system starts to process the fragment of the software set located between the start 
point and the instruction in the software module after which the transfer was made to the 
automated diagnostic system module. This fragment is processed by sequential transition from 
the input s cation to the output specification. 


Sequential transition from the input specification to the output specification includes 
several stages. In the first stage, based on the current value of the test example, the software 
set is executed in single-step mode as the automated diagnostic system constructs a table of 
transfer addresses, which is a graph of the present implementation of the software set t. 
In this stage a table of input parameter transforms is generated, containing the altered value of 
each processed parameter along with the address of the processing instruction. If a looping 
fragment is located in this section of the module, two successive values are taken as the 

nning and end of the loop. The second operand used to transform the parameter is written 
in the next line of the table of transformations executed. | 


The next stage of automated diagnostic system operation is based on the use of various 
algorithms to analyze the characteristics of the specification elements. Three types of 
specification element characteristics are distinguished in this approach: Numerical value, logical 
value and coordinate. 


If a specification element is a number which in the test example at hand should have a 
certain value, then this value is a characteristic of the first type. If the specification element is 
a logical variable, the logical value is represented by the set of one bits in the byte or the 
number of shift positions between the codes of the required and ectual byte (if the number of 
ones is the same). If the specification element should be located at an assigned position in the 
specification but operation of the program places it in another location, this means that it 
should be located at a certain distance in the output buffer from the previous element or at 
another distance from the start of the output buffer. This distance is a characteristic of the 
third type. Since the automated diagnostic system diagnoses only individual errors, only one of 
these characteristics will be analyzed. 


In this stage, diagnostic operation involves processing of the reverse transform of the 
output parameter with the required characteristic. 


Reverse parameter processing is based on algorithms which check for the existence of 
— of a certain type in program fragments. In this case, the following types of errors are 
und: 
— Functional transform instruction omitted; 
— functional or logical transform instruction improperly used; 
— erroneous parameter selected; 


— second operand improperly selected®. 








The transform is performed as follows. Beginning at the bottom line of the table of 
transforms executed, the next parameter value is selected. The p fragment performing 
this transform is selected and the value of the characteristic of the parameter required is 
selected. This characteristic is known for the last step of the transform since the automated 
diagnostic system utilizes the output specification of the test example. Assuming that the error 
was a single error, it should be eliminated by correcting, adding or deleting one functional 
instruction. 


The algorithm used is based on running through correction versions corresponding to 
possible types of errors. For example, it is initially tested whether a functional or logical 
transformation instruction was correctly used. This is done by replacing it with other 
instructions of the same group of transformation instructions and checking the current value of 
the parameter, taken from the next line in the table of transforms. If the processing generates 
the required specification element, it is considered that the error has been located; otherwise, 
the algorithm starts analyzing the next possible error. 


If no version causes the parameter characteristics which are required to be generated, one 
step of reverse transformation of the elements of the output specification is performed, 
corresponding to the transformation of the program ent in question. The transformed 
element value is stored in the table of required transforms and the next fragment of the 
program being tested is taken from the table of transforms executed. During this stage of 
diagnosis, a table of required transforms is generated, which is subsequently used to diagnose 
functional errors caused by more complex factors. 


In contrast to traditional tracing facilities, the automated diagnostic system itself 
determines the software fragment to be displayed ani can show the user current values of a 
parameter, values of parameters from the table of required values, and increase the level of 
automation of the process of diagnosing functional errors by adding more complex — 

rithms. Experimental studies of the algorithms described above have confirmed their 
veness. 


Diagnosis of interrupt processing logic errors. Errors in interrupt processing logic lead to 
various temporary disagreements between presumed and actual software set fragment processing 
intervals or the intervals of individual modules, as well as incorrect sanctioning of software set 
interrupts. 


A timer is used to model the necessary sequence or set of interrupts, the operating mode of 
which is set by a table of external actions affecting the software set. This table is filled in by 
the user considering the presumed algorithm of external interrupts. It indicates the interrupt 
level and time interval between an interrupt and the previous interrupt. As the software set is 
processed, the automated diagnostic system determines the flag indicating sanctioning of an 
interrupt of a given level in the interrupt table; if an instruction to allow or unmask interrupts 
is encountered, or if interrupts are inhibited or masked, the automated diagnostic system resets 
the interrupt sanction flag. 


Each interrupt generated by the timer in accordance with the table of external actions is 
analyzed by the automated diagnostic system. If the interrupt corresponds to the sanctioned 
interrupt flag in the interrupt table, control is transferred to the interrupt handler. The 
reaction time of the automated diagnostic system to an interrupt is recorded and considered as 
the external action table is generated. If the interrupt sanction flag does not permit the 
interrupt which has occurred, it is not processed. In this case the address of the instruction in 
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the module where the interrupt occurred is recorded, and after the module is processed the user 
receives a message indicating unprocessed interrupts, the coordinates of the module 
corresponding to the moment when such an interrupt occurred, and the address of the 
instruction which had modified the interrupt sanctioning flag. If desired by the user, when 
errors occur the processing of the module can be halted and diagnostic information generated. 


Since the time relationships between the interval processing of various software modules 
and their fragmen's are most frequently ated by the moment of arrival of external actions 
or the reaction time of the software module to input data, these automated diagnostic system 
facilities allow logical errors in interrupt processing to be tested with some approximation of the 
actual process. 


Automated diagnostic system composition and functioning. The automated diagnostic 
system consists of four functionally oriented modules: Diagnosis, interrupt processing, func- 
tional error diagnosis and the control module. 


The main purpose of the diagnostic module and the functional error diagnosis module was 
described above rather completely. The interrupt processing module diagnoses interrupt errors 
and consists of programs for operations with the timer, for processing subroutine calls, programs 
to control the interrupt sanctioning flag and analyze timer signals imitating external actions. 
The control module implements the dialog between the automated diagnostic system and the 
user, allowing passing of all necessary information concerning the software to be diagnosed to 
the automated diagnostic system and starting of the automated diagnostic system for diagnosis 
of logic, functional or interrupt processing errors. 


When using the automated diagnostic system it is preferable first to diagnose and correct 
logic errors, then functional errors and finally — interrupt processing errors. The automated 
erp system is designed for use under SRM? or OS-1800 on SM-1800 computers, occupies 
12K of memory and can debug software sets of 20-30K. 
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—* Purpose of the system. The used with various types of automated systems 

— ere Se, See include, particularly, special dictionaries, for 
example information retrieval tion of dictionaries for automated planning 
systems involves a number of — related to the selection of a lexicon, its classification, 
etc. These difficulties are vated by inconsistent terminology, the disagreement and even 
contradictions found in the interpretation of terms in a single terminological system, formal 
logical errors (vicious circles in definitions, etc.). Elevation of the level of linguistic support 
requires analysis of the scientific technical terminology to produce an objective 
evaluation of its properties and, where necessary, correct the list of terms and/or their 
definitions. 


This analysis presumes the solution of a broad class of problems, which can be arbitrarily 
divided into four groups. 


Isolation of terms which are in a certain relationship to an individual term. Problems in 


ee Soe Isolation of terms which are directly contained in the definition of a term, 
i.o. its direct semantic components; Seietion of tame | which a given term is defined 
directly or indirectly, i.e., all of its semantic components; i —— , the definitions of 


which directly pretends og ott or ole epmaaer ge ge omg vates; isolation of terms 
defined through the term in question directly or indirectly, i.e., all of its semantic derivates; 
rep erent mee Leger ad g thers sera which each su term is 
a direct semantic derivate of the previous term, i.e., chains of derivation (chains of minimal and 
maximal iength, chains which begin with the term in question and ‘hains which end with the 
term ——— are particularly distinguished); construction of derivation chains relating to 
parti terms 


Isolation of terms in a given relationship to the entire terminological system. Tasks of this 
group include: Isolation of the most general terms, not defined in the terminological system in 
question, i.e., the initial terms; isolation of terms not included in the definitions of other terms, 
i.e., terminal terms: isolation of groups of terms and individual terms which are semantically 
unrelated to the basic terminology, isolated groups of terms and isolated terms; construction of 
all derivation chains relating the initial and terminal terms, incl isolation of chains of 
maximum and minimum length; isolation of cyclical derivation chains (beginning and ending in 
the same term), i.e., vicious circles in the definitions of terms. 


Determination of quantitative parameters characterizing individual elements of the ter 
minological system. Problems in this group include: Determination of the number of direct 
semantic components of a given term; determination of the number of all semantic components 
of the given term; determination of the number of direct semantic derivates of the given term; 
determination of the number of all semantic derivates of the given term; determination of the 
length of the maximum derivation chain connecting the initial and the given term, i.e., the 
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D-order of the term; determination of the length of the shortest derivation chain connecting the 
initial terms and the given term, i.e, the K-order; determination of the number of all 
derivation chains beginning (or ending) with the given term. 


Determination of quantitative parameters representing the terminological system as a whole. 
Problems of this group include: Determination of the number and specific gravity of initial 
terms; determination of the number and specific gravity of terminal terms; determination of the 
relationship of the total number of terms in the terminological lexicon to the number of initial 
terms, i.e., the derivation activity; determination of the maximum and mean number of direct 
semantic components, semantic components, direct semantic derivates and semantic derivates; 
determination of the maximum and mean D- and K-orders; computation of the connectedness 
factors of the lexicon’; determination of the number of all derivation chains connecting the 
initial and terminal terms. 


In addition to these tasks, it must be possible to rank elements of the lexicon according to 
certain characteristics (listed in group three) and to edit the lexicon (change the number of 
terms, eliminate vicious circles, etc.). 


In actual lexicographic sources (terminological dictionaries, collections of recommended 
terms, terminological standards, etc.), the information required is not explicitly stated, although 
it is present in implicit form. Its manual isolation for a dictionary of any significant size is an 
exceptionally difficult and labor-intensive task. The complexity of terminological analysis 
results from the fact that a terminological lexicon, like a lexicon in general, is not an 
amorphous conglomerate of words and word combinations, but rather a systemically structured 
formation in which each element, i.e., each term, is related to the remaining elements of the 
lexicon by a multitude of connections — direct and indirect. The number of connections and 
their length, or depth (the number of terms they encounter) are so great that they are 
practically impossible to trace without the use of automation equipment. This results in hidden 
errors which significantly influence the quality of a terminology, such as incomplete sets of 
terms, incomplete or inprecise definitions, vicious circles in definitions, etc. Consequently, a set 
of tools is needed to automate processes of analysis and correction of terminologies. 


The Institute of Cybernetics, Ukrainian Academv of Sciences has created an automated 
system for analysis of terminological lexicons called the ASAT-2, designed to perform the tasks 
outlined above. The system supports analysis and editing of terminologies. It allows 
computation of more than 30 quantitative parameters characterizing the individual terms and 
the entire terminology, construction of a number of classifications and sequences of terms, 
locations of terms in certain semantic relationships with a given term, verification of the 
presence of semantic connections between given terms, etc. The terminology is tested for 
integrity, circles in definitions and certain other errors are located (and eliminated in 
interactive mode). 


The system is intended for use by terminologists, automated system linguistic support 
planners, technicians planning banks of terms, etc. 


In contrast to the experimental terminology analysis system ASAT created in 19797, the 
ASAT-2 system does not have rigid limitations on the size of the dictionary, number of direct 
semantic components and direct semantic derivates, the performance characteristics are 
significantly improved, the range of tasks performed is significantly expanded (particularly in 
the first and third groups); interactive-mode operations are allowed. 
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The network model of a terminological lexicon. The ideal model of any systematically 
structured formation (including a terminological dictionary) is a graph. A eoph, the points of 
which represent the terms (more precisely, their meanings), while the 
relationships among them, is called a lexical semantic network (a mutually unambiguous 
correspondence is observed between terms and points). 


The traditional method of representing a lexicon, including a terminological one, is an 
interpreting dictionary, in which each term corresponds to certain other terms from its 
definition. 


These defining terms are interpreted by us as direct semantic components with respect to 
the term defined, which in turn is interpreted as a direct semantic derivate with respect to the 

ing terms. In this case the lines of the graph reflecting the terminologicl lexicon are arcs 
directed from the points corresponding to the defining terms to the points corresponding to the 
defined terms (from direct semantic components to direct semantic derivate). 


In this interpretation, the semantic network is an oriented graph. As a result, practically 
all of the relationships and parameters of the lexicon listed above have graph-theory analogues. 
For example, the semantic derivates of a certain term are nothing more than points which can 
be reached from the point represented by the term; the D-order of a term is the length of the 
longest path leading from a root point to the point of the term, etc. 


Consequently, network rerary an approach to the study of the properties of a lexicon 
as the properties of a mathematical formation — a graph, i.e., the terminological analysis tasks 
outlined above are reduced to graph analysis tasks. This permits broad application of graph 
theory methods. 


Graph-theory methods for analysis of a terminological lexicon. Analysis tasks are 
performed in three stages. In the first stage, the tasks of the second group are performed. 
These tasks can be interpreted as collection and organization of information on the structure of 
the semantic network and isolation of substructures. The most common graph theory method 
for collection of this type of information is specially organized trip around the points and lines 
of the graph. The information thus generated is formulated as a set of numbers of the points. 


Numeration F of the points of graph G is called an injective mapping of the set of points 
V(G) of the graph in set N of the natural numbers: F:V(G)}N. 


This information is generated using the so-called N numeration, based on a search to 
depth’, one of the results of which is isolation of all loops in the graph. Loops in a semantic 
network correspond to vicious circles in the terminology, indicating, in general, incorrect 
definitions of terms. It is therefore desirable to eliminate such circles when they are found. 


Elimination of circles in the early stages of operation of the system is useful not only from 
the contextual aspect, but also from the purely technical aspect. This is because, first of all, 
most graph-theory methods are most effective on acyclic graphs and, secondly, the elimination 
of circles facilitates the determination of initial and terminal terms. It is impossible to describe 
a terminological system correctly without locating terminal and particularly initial terms. In 
an acyclic graph there are always root and terminal or sheet points‘. The former correspond to 
initial terms, the latter to terminal terms. 
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of the connections forming the circle is broken. We 
eliminating circles is not always correct, since 
equivalent. Its use must therefore be limited to the simplest cases. 


of the acyclic graph represents topologic sorting of the points’, i.e., ordering of the points of 
graph such that the contiguity matrix is an upper triangular matrix. 


Topologic ey has the following property: Let T7(v) be the number of point » 
topologic sorting h G. Then if point v, can be reached from point »,, then T(v,)< 
(*, 4 eG). From on follows that: If v,, v,, .... ¥, is a path in graph G, then for ¢ 

it is true that T(v,)<T(v,,,). 


We can conclude from this property that topolegic sorting of the points on a 
the order of inclusion of the points in a path on the graph. Consequently, topologic 
points in a semantic network yields the sequence of inclusion cf terms in a derivation chain. 


This result of topologic sorting simplifies the performance of the remaining tasks of analysis. 


To perform tasks in groups one, three and four, information is needed on the connections 
between the individual elements of the lexicon. Ther sre, in the second stage of analysis 
— on tie — — Information 
obtained as a result of the second stage of operation is formulated as special matrices. 


ẽ 


Ts 


; 
‘HE 


In addition to the contiguity matrices, three more matrices are related to oriented graphs. 


The reachability matriz D, recording the fact that one point can be reached from another 
(element — if there is a path from the point numbered i to the point numbered j d,,=0 
otherwise 


The distance matriz S, recording the distance (length of shortest path) detween puints 
ere =k if point number j can be reached from point number i, while the length of the 
— Detwemn: thete pulley 2 quel te & Wiles =o otherwise). Matrix S is sometimes 
calod the shortest path mati, snc, wig it, one cad rapidly find the shortest path length 
ween points. 


The longest path matriz P, Pore drat aah ar rp —teeperontiptime mage ne cane: 
points (element p= if point number j can be reached from point number 3, while the 

of the maximum path between these points is d, p,;=« otherwise). Matrix P is sometimes 
called the critical path matrix since, using it, one can rapidly find the critical path length 
between points. 


The matrices D, S and P are interconnectqd, i.e., d,;=0<=>8,<e<=>p,<o. 
The reachability matrix is determinant, since most methods of its construction allow 


construction of the maximum length and distance matrices. The most common method of 
constructing these matrices is the method of Floyd‘. 
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FL: PROC (A, D, N); 
DCL (A(N, N), D(N, N)) BIN(1); 
D =A; 
DO K=2 TO N—!; 
DO [=1 TO K — 1; 
IF D(I. K)=1 THEN 
DO J=:-K+i TO N; 
— IF D«K, J)=i THEN DAL, J) i: 
ENO; 
ENN; 
END; 
RETURN; END FL; 


The temporary co.nplexity of the procedure FL is equal to '). Operation of procedure 
FL utilises both the rows of the matrix (J loop) ond the columns I looys). 





i to & contiguity 
— With, Lt, 0 lat of ——— wtih tho egiead pale from the given 
point for D). 
If the matrices are represented in computer memory 28 lists, isolation of a matrix row is a 


simple task, whereas isolation of a column is a more complex piocess. 


Therefore, the system utilizes another method tc construct the reachability matrix from 
the con y matrix. The method is Rese? ce the SUNS pny ee ae : 
bd 7 int » to 


; 

: 
[ 
: 
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SM: PROC(A, D, N); 
DCL (A(N, N), D(N, N)) BIN(1); 
DA; 
DO KeN—2 701 BY —1I; 
DO JaeK+' TON—1; 
Ik A(K, J) 1 THEN 


DO l#J+1 TO N; 

IF D(J, 1) 1 THEN D(K, I) #1; 
END; 

END; 

END; 


RETURN; END SM; 


used 
path 
— a eee cee” get eae oo ee One oe Se 


One important task is determination of the presence and type of semantic connections 
between two terms. Three cases of relationships between terms must be considezed: 


— There is a semantic connection if one of the terms is a semantic component of the other 
or there is a third term which is a semantic component of the two terms; 


— there is semantic conjunction when the terms are not semantically connected but there 
is a third term which is a semantic derivate of both the terms; 


— there is neither semantic connections or semantic conjunction. 


Let us assume that two terms are fixed by the topologic numbers J and J, where J>J. To 
perform the task, we utilize the distance matrix §. The task is performed by the following 


procedure: 


REL: PROC(S, N, I, J); 
DCL S(N, N) BIN FIXED(8); 
IF S (J, 1) >0 THEN 
PUT EDIT (“‘TEPMHHDI CBASAHDI’) (A(15)); 
ELSE DO; 
DO Kei TO J— 1; 
IF S(K, I)>0 & S(K, J)>0 THEN DO; 
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PUT EDIT (‘TEPMHHbI CBASAHbI') (A(15)); 
RETURN; END; 
¢ END; 
DO K#I+1 TO N; 
IF S(l, K)>0 & S(J, K)>0 THEN DO; 
PUT EDIT (‘TEPMYHbI COMPADKEHDI’) (A(i7)); 


RETURN; END; 

END; 

PUT EDIT (‘TEPMHHbI HE CBSI3AHbI’) (A(18)); 
END; 


RETURN; END REL; 


Procedure REL has a temporary complexity on the order of O(N) for any 
es Seer renee ae eee In the ASAT system, this task executes in a 
period of time on the order of 0(2”). 


Another no less important analysis task is that of constructing the chain of maximum 
length connecting two terms. The task is performed using the maximum path matrix P: 


te P: PROC(P, N, I, J); 
DCL P(N, N) BIN FIXED(a); 
L=P(J, 1); PUT LIST (J); 
M: IF L=i THEN GO TO MI; 
Leel— l; 
DO K#J+1 TO I—1; 
If P(J, K)==L THEN 
if P(K, I)=1 THEN DO; 
PUT LIST(K); JK; GO TO M; END; 
END; 
PUT LIST(I); 
RETURN; END DCP; 


The temporary complexity of procedure DCP is less than O/N*). In the ASAT system, 
this type of task is not performed due to its great complexity. 


Similar procedures exist for performance of the other analysis tasks. 


Implementation of the system. ASAT-2 is implemented in software written in PL/1 and 
oriented toward the YeS series of computers. 


A semantic network (as well as distance and maximum path matrices) are stored in 
computer memory as contiguity lists. A list element for point i contains the follo 
information: j — the number of a point which can be reached from point ij RS — the length 
the shortest path from point i to point ¢ RP — the Tengen of the Ginee path Som pelat 4 to 
point % PP —a pointer to the next element on the list. 


Shs comeine ik Wink hee 


DCL | ABB BASED(PQ), 
2 J BIN(16), 
2 RS BIN(8); 
2 RP BIN(8); 
2 PP PTR; 
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When a semantic network is — in computer memory, the number of elements of 
type ABB is equal to the number of lines in the network. During the second stage of system 
operation, the distance and maximum path matrices are constructed. These matrices are 
assigned the variable RS and RP, respectively. This increases the number of list elements, 
since list elements are generated corresponding to paths leading .o terms from indirect semantic 
components. However, experiments have shown that this increase is not significant, since the 
mean number of semantic components in the lexicon (determining the mean number of elements 
in a list) is just a few, much less than the total number of terms in the lexicon and, 
consequently, the use of the list form for matrices is justified. 


The input of the system receives a list of terms. This list is prepared from the definitions 
of terms in the interpreting dictionary. A dictionary entry in an interpreting terminological 
dictionary is converted to a sequence of terms, the first of which is the term defined (it is 
marked with the symbol #), followed by terms from the definition, adjusted to a standard form 
(usually nominative singular; marked with the symbol H). 


For example, the dictionary contains the following definition: “Segment — an entry in a 
hierarchical structure.” This dictionary entry is transformed to the following sequence of terms: 


# SEGMENT 
H. ENTRY 
H. HIERARCHICAL STRUCTURE 


The system, as we have stated, operates in three stages. The first stage performs tasks 
from the second group, after which the user can perform a number of operations to edit the 
mary terminology, namely: Elimination of errors in entry of terms; changing of the 
composition of terms (in particular, cases may occur in which a term present as a direct 
semantic component is not one of the header terms; then, if this term belongs to the subject 
area in question, the user may decide to enter it into the dictionary as a header term); 
eliminate vicious circles, either by breaking one of the connections between terms or by 
the definition of one or more terms (the system can operate in a mode in which a 
double bond between terms such as A#B is automatically broken); movement of a term from 
the list of initial terms to the list of defined terms, or vice versa. 


In the second stage of the system, this edited terminology is processed, constructing the 
matrices mentioned above. 


In the third stage of operation upon user request, information is output as required for 
analysis, i.e., the tasks of groups one and four mentioned above are performed. Supplementary 
information (lists of terms sorted according to various characteristics; the total number of both 
direct and direct and indirect connections in the lexicon, etc.) is also generated, facilitating 
analysis of the terminological lexicon. 


The ASAT-2 system was tested on a terminological dictionary “data bases in computer 


networks,” containing 268 terms®, as well as several fragments of terminological and general 
lexicons. 
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ie: Introduction. Planning of data bases is a lengthy and cumbersome process. For data 

500 or more elements, this process may take months, in some cases even years’. 
Basically, the data base planner is guided by his intuition and experience, and the quality of 
the results produced is quite doubtful. Poorly planned data bases hinder the process of 
application planning, increase the time and complexity of implementation of a data system and 
the time of development. In existing automated information systems based on DBMS, the 
creation of effective data bases is hindered by the following factor’: 


— Insufficiently deep analysis of data requirements (including the semantics of names of 
attributes and interconnections among data items); 


— the lengthy process of structuring, doubtful and difficult with manual processing; 
— difficulties related to testing the planning process. 


Elimination of these shortcomings requires supplementary facilities to automate the 
process of logical planning of data bases for the SM computer — the PROYEKT BD ap- 


plication program package. 


The planning process. One effective method for development of logical data base models is 
the introduction of a number of relational data model concepts’, reducing the data structure to 
third (or fourth) normal form. Structuring of data according to the third (fourth) normal form 
yields a clear representation of the subject area, precise definition of data base processing rules, 
simple data organization, decreasing the probability of performing incorrect operations*. 


The preparatory stage in logical data base planning is that of creating a conceptual model 
of the data as the complete set of all requirements for the data, obtained from user concepts of 
the real world and reflecting the data elements and their interconnections obtained as a result 
of collection and analysis of requirements for the data. 


Individual local representations are input in multiple-terminal access mode and are 
transmitted to automated initial processing procedures, during which the local representations 
are edited and combined into a composite model. 


Editing is an interactive process performed until all situations recorded by diagnostic 
messages have been resolved. 


Based on the composite model generated, automated procedures of local structuring and 
creation of a canonical model are performed. The relations in fourth normal form — ene 
result of logical structuring represent a canonical logical data base model, an effective plan of 
the relational data base logical structure. 


111 








However, the planner himself can make changes to the canonical model. The principles for 
changing the canonical model may vary: 


— To increase throughput; 

— to adjust relationships in order to allow their use by individual application programs; 

— in response to changing data requirements; 

— in response to limitations on data structures in a specific DBMS. 

The canonical model is changed by automated procedures for plan improvement. 

Data base interactive planning language. This is the by which the developer 


interacts with the automated system as required for entry of requirements, editing and 
ae This language is basically oriented toward the use of menus of functions to be 


The first (starting) menu is used to select one of the basic functions: 
— Entry and editing of local representations; 
— creation of a canonical model; 


— improvement of a structure; 





the 

The correspondent subsystem is used for entry and editing of local representations (full 

and abbreviated names of attributes, associations among attributes) in two special screen 

formats. Special screen formats are used to simplify entry of local representations, menu 
mode is used for queries, a programmable full-screen editor is to edit input data. 


Composite and canonical models are created by the MODEL subsystem, which operates in 
menu mode and interacts with the planner using special screen formats. 
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The CENSOR subsystem is used to improve the canonical model generated. 


The INTERFACE subsystem tests the limitations of the MIRIS DBMS, recodes attribute 
names from Russian to Latin characters and creates files describing schemas and subschemas 
ready for loading into the MIRIS DBMS in order to produce a plan of the data base logical 
structure. 


The PLAN REPORTS subsystem documents the process of logical data base planning and 
prints out the following lists: Local represen’. ‘ions, mismatched associations, excess 
connections, incomplete functional dependences, transitive connections, primary keys, candidate 
for secondary indexing, relationships, connections from compound keys to xttributes of local 

, as well as charts of relationships, connections between attributes of local 
representations and distribution of attributes among relations. 


To replan the logical structure of a data base, the RETURN subsystem makes the 
transition to any stage or procedure of planning, clearing the results of previous planning. 


Conclusions. PROYEKT BD functions in the environment of OS RV 3.0 (or RSX 11M 
V.4.0) and the MIRIS (or KVANT) DBMs on SM-4 and SM-1420 computer systems, and 
places no limitations on their functional capabilities. The memory required is 24K words. Disk 
space required is 102K words. 


Planning time for a data base of 400-500 elements is 4-6 hours. 


PROYEKT BD has been introduced in organizations of the Ministry of Ferrous Me- 
tallurgy, Radio Industry Ministry, Food Industry Ministry, Medical Products Industry Minis- 
try, Ministry of Agriculture, State Supply System, as well as institutes and enterprises of other 
ministries. The annual economic effect per installation is 20,470 rubles. 


Delivery and installation of PROYEKT BD are performed by the Voronezh Inter-Industry 
Specialized Operating System and System Software Fund. 
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a A software system for the automation of planning of an information model and data 
structure planning' was developed at the Moscow Economics-Statistics Institute in 
1980-1985 on assignment from the USSR State Science and Technology Co: ~iittee. Since 
1986, the system has been maintained by the Centralized Library of Algorithms ‘nd Programs 
for Automated Management Systems, “Tsentrprogrammsistem”  Scientific-Production 
Association, Ministry of Instrument Building, Automation Equipment and Control Systems 

. No. 713). The system is designed for use with the SETOR DBMS and its analogues 
SEDAN. SETKA, TOTAL), and runs under OS YeS, version 4.1 or later. This is the second 
package following the “Struktura” application software package’ for automation of data base 
planning which has been distributed or a centralized basis in our country. 


The system is designed to plan large integrated economic information systems. Particular 
attention was therefore given to accounting for the specifics of economic tasks such as: Large 
volumes of metadata; great specific share of bases in the set cf requisite types; complex 
algorithmic interactions of characteristics with several levels of results; agreement of the names 
of the overwhelming majority of functional dependences of requisites with a predefined frame 
(pattern); extensive use of coding systems; absence of rigid boundaries between data and 
metadata; intersections of tasks in various functional services with respect to requisites and 
documents used; correlation of regulation processing with certain time periods; frequent 
variability of document form. 


System architecture. The system consists of a set of programs (Figure 1), interrelated by 
an integrated planning data base. The SETOR network DBMS is used to maintain the 
planning data base. Figure 2 shows a fragment of the planning data base schema, the 
rectangles containing the SETOR master files, while the circles contain secondary files. The 
detailed planning data base solution is described in’. 


The system software consists of universal and specialized programs. Universal programs 
are used for loading and editing of the data base, retrieval and planning of data from the data 
base and unloading of data base files in linear sets. These programs are used both to manage 
the planning data base and to process any user data base in the SETOR or SEDAN DBMS; 
their advantages over the standard SETOR DBMS facilities include verification of correctness 
of data base processing, possibility of operation with files following an emergency (including 
— ————— and reorganization), highly effective access, and memory requirement, 80-120 
Kbytes. 


The system also includes special functional programs for semantic analysis and retrieval, 
automation of description of document forms by requisites and coding of characteristics, special 
planning data base editing, computation of frequency and volume characteristics of the use of 
requisites and characteristics as a function of their inclusion in document forms, and actual 
planning of the structure of a user data base. 
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Interactive examination and editing of 4 data base files are performed by the 
“remote reference” software package through the KAMA system or the PRIMUS dialog 
shared-use system (cf. Figure 1). 


techniques. Operations are started by formation and | of preliminary 


System usage 
versions of the term dictionary in the planning data base, list of classifiers, of structural 
subdivisions and lists of the most frequently encountered requisites — object area 


characteristics. 
1 — 
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Key: 1, “Remote information” software package; 2, KAMA software 
package; 3, user data base; 4, planning data base; 5, SETOR DBMS; 
6, universal program; 7, loader-editors; 8, data retrieval and priut 
out; 9, unload data base files to line sets; 10, special programs; 11, 
semantic analysis and search for characteristics; 12, automation of 
requisite description of document forms and role coding of 
characteristics; 13, special planning daia base editing; 14, calculation 
of volume and frequ_ncy characteristics of requisite use; 15, planning 
of user data base structure; 16, PRIMUS dialogue shared-use system; 
17, input and output data on magnetic disk, tape punch card and 
printer. 


Subject area document and video screen formats, their requisites and characteristics are 
then described. Based on the experience of use of the system for planning of large economic 
information systems, the labor consumed in this stage represents up to 75% of the total labor 
consumed in the entire process‘. Therefore, in contrast to most other methods, oriented toward 
the single user, we suggest parallel performance of operations in this stage by many workers 


115 








with moderate qualifications. From the organizational standpoint, it is desirable to assign 
workers not to “tasks,” but to specific subdivisions, subject area workers and document forms. 
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Key: 1, Requisite composition of files; 2, functional dependences; 3, 
classifier descriptions; 4, terms dictionary; 5, description of user data 
base files; 6, description of requisites (types); 7, requisite composition 
of characteristics; 8, user data base file connections; 9, filling of 
document requisites in subdivisions; 10, description of characteristics 
(types); 11, semantic codes of characteristics; 12, description of 
document and screen formats; 13, use of documents in subdivisions; 
14, algorithmic connections among users; 15, expansion of document 
form descriptions; 16, document flow paths; 17, description of 
subdivisions and organizations; 18, enterprise structure. 


The results of the examination are recorded on standard form. On each subject area 
document form a description blank is filled out, reflecting the name and code (number), nature 
and type, frequency and size characteristics of the document. Data are indi on the 
movement of the document among subdivisions, methods and times of its preparation at. use 
in the subdivisions, with informal comments by the planner. 


Examination blanks are filled out for each requisite characteristic and each document 
format characteristic in the subject area. For a requisite characieristic, the code and name are 
recorded plus the length in the given document, the use as a sorting key, inclusion in a 
single-l’ or multiple-line portion of the document, type of meaning and list of subdivisions 
filling § he requisite in the document. For a characteristic, the code and name (coinciding 
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with the code and full name of the requisite base) are given, plus the of the requisite 
composition of requisite characteristics, sequence of computation, list of subdivisions 
filling in the characteristic in the document, etc. 


When examination blanks are filled in, particular attention is given to simplicity of 
in the documents. For example, in contrast toꝰ, the planner need not state the —2 
size characteristics for each characteristic and requisite: They are computed by system software 
based on the document characteristics. The mean time requirement for description of one 
document form is two hours plus 0.1 hour per requisite. 


Data from the blanks are entered on machine-readable media and loaded into the planning 
data base by the universal loader-editor program. 


To plan the combined economic information system data base, the results of the 
examination, obtained in parallel, are tied together into a common information model at the 
requisite level. The complexity of this operation consists in that the same characteristics 
(requisite bases) and requisite-characteristics have different names (synonyms) in different 
document forms and subdivisions. Cases of homonyms and polysemia are also encountered. 


The information model stored in the planning data base is modified according to the 
results of the operation of formation of the correct identifiers. For example, if one of the 
synonym characteristics is used in two documents, while another is used in three, a single 
characteristic is selected for inclusion in all these documents. 


A number of program checks for consistency of the information model are then performed, 
after which the planning data base is ready for machine planning of the user data base or for 
use as a reference dictionary for manual planning. 


With machine planning, a program is run to compute the size and frequency char- 
acteristics of the use of characteristics and requisites based on the current planning data base 
status. 


The facilities of the system utilize the algorithm developed for automatic planning of the 
user system information base, consisting of the integrated master and secondary files (snpported 
by the SETOR, SEDAN, SETKA, TOTAL or SIOD network DBMS), as well as sequential 
access files. The input of the algorithm is the information model stored in the planning data 
base. The user has the opportunity to edit the initial and/or outyut data generate” 2 planning 
in the planning data base. 


It is possible to use the system in the stage of maintenance of the software. Its program 
facilities allow partial replanning of a user data base. The use of the planning data base as a 
dictionary system, in addition to the more common capabilities, supports the retrieval of 
metadata by formatting a characteristic name example, simultaneously storing several versions 
of the plan and integrating plan and user data. 


Metadata identification methods. The following methods of identifying characteristic 
names are known®: Key word in context identifiers with indexes, rizing of requisites and 
stylized names. These methods are similar in terms of dependence of labor requirement with 
the number of names analyzed to pairwise comparison of all characteristics. Therefore, for the 
economic information system of a middle-sized industrial enterprise, they require excessive 
labor expenditures. 


117 

















In connection with this, a method has been developed for the system for unique 
identification of characteristics by automated semantic analysis of their names. The names f 
characteristics are described using a simplified role (frame) approach: The sense of a uame is 
unambiguously coded by an indication of “performer in role,” i.e., answers tw fixed questiois 
(concerning the essence, details, time and other characteristics) in terms of the economic subse ‘ 
of the natural language. A traditional seven-role frame® and/or simplified five-role frame ma: 
be used. A dictionary of terms is used in which each term corresponds to a code, with 
synonyms having identical codes. Coding of terms is performed either by the program o1 
manually. 


After loading of the results of examination into the ing data base, a program is run 
to analyze the semantic similarity of characteristic thc ye Sa two cluster functions for 
the “distance” between the names of characteristics j and k- 


m 
Kin= ¥ rijnts: 


es | 


m 
“y 2Ni jp 
Knr= x —— 
ins Liy + lin 


where n,,, is the set of differences between terms in role i, i.e., terms present only in code j or 
code k; V, is the penalty for one difference in role 4; m is the number of role names; lip le 
represent the number of terms in role i with semantic code j or k, respectively. 


Semantic codes are considered similar in K 46 K . The “distance” functions meet the 
strict requirements of cluster analysis: K,,}>0V¥ a, ber. where P is the set if characteristics 
analyzed; K,,=0 when and only when “the semantic codes a and b coincide completely; 
K,,= K,,¥ a, bE 5 K,8 K+ AV a, b, c€ P. 


Proper selection of the parameters and Q, i=I,m, with completeness of output at 
least 0.97 provides level of relevance 0.2-0.3; on the average, a planner manually selects one 
synonym for each 4-5 selected by the program as similar ia meaning. 


We note that for the method of semantic analysis suggested the number of manual 
comparisons of names S is proportional to the actual number of synonyms C;: S= —+—C, 


(where Rsconst is the level of relevance), whereas for the methods listed above it is pro- 
portional to the square of the number of characteristic names®. Therefore, in spite of the 
greater machine time cost‘, the use of the method suggested is expedient. Thus, for 3153 
characteristics in the accounting system of the “Frezer” plant, for the method of semantic 
analysis S=5563, 2-4 orders of magnitude lower than for other methods. 


Since the number of requisite-charactenstic types is usually significantly less than the 
number of requisite—bases, while the lengths of characteristic names average 2-3 times, we 
suggest a two-stage method for their unique identification: Categorization with subsequent 
analysis of “key words in context” within each category. Thus, in the accounting system of the 
“Frezer” plant, 122 requisite-characteristics were found (not counting document numbers); 
following division into six categories: Codes, numbers, signatures, dates, names, other $=299. 
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User data base planning algorithm. One peculiarity of the algorithm is the combination of 
analysis of functional dependence of requisites (during examination they are reflected in the 
characteristics, coding systems, etc.) with automated separation of the essence of the subject 
areas from the results of the examination. The algorithm includes the following main steps. 


1. Determination of the list of data base master files. 


1.1. Each requisite-characteristic z, for which the total number of document lines sorted 
by py cab enone quan tae tp gur call tha E(z)> Ey is interpreted as key k, of master file 
mM» 


1.2. For V z,€{k,}, the functional dependences are analyzed: 2, = , ae 
is tin Ge pe — Pagers lye peor yndrer mn aay ag by Gee hey % 


‘ ae “A list of requisite one to one” pe Ae ny poet a achene laggy 
= a aoe each other ~ 
nn Ae rr magia = We Ke, = nf 35 moter fe lly z) is 
eae * ,€ — ——— re ere {k,, 2" 
———— gt bt af, Bett " Dis Nag Erste 
darpto was aot previouly asia) — 26 (hy 2 , such that 2/427, and 
aft aa If a certain descriptor was previously defined ‘for | .: z= D{k,), then for 
ze {z',}, Zt D(z,)V zy 2, = D(z!) is fixed. 

1.2.2. The 1:1 situation between keys of master files k rey gecag  affeg 
code. A unique non-key “code” field a, hy is catered in 0 fl with name m, ({a,} is the 
set of non-key requisites m,,). Rogaine obet rluine age oy drat In case of 


access through k,, the reference file :n,, supplies code k, — — Gan will be 
selected by examining chains based on key k, from m,. 


1.2.3. “One to many” (1:M) situations are interpreted between the keys of the master 
= bly beh sims ea pd oe Pages th Sey aan 
=k, an =k, respectively. The set 

salthas hisaines & tis ik wnusae- cae ail cx hocnsall tatumeon {¢.9}=@ and the 


set of non-key function requisites {b,,} = —" 


sc RET a TINT 
Zp 


2.1. If — * dence t= We. studied, in all 
remaining dependen ces \0= Efe ib a 3 by i —— i Ze ~ sae this generates 
new, previously undescri » they are 


2.2. If t,# D(z,)V zy€ {k,}, the functional dependences of z, are analyzed. 
2.2.1. In place of the arguments of the dependence where ee ee 


bstituted: If zt » BF, J 2 Jz =D(2), then {z', ..., 2° 1, 2, 2", 
et 3 es a pte Dz), f b 2j> 2 
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cal contradictions among functional dependences wh, ten the dn are 


eliminated: Ac ‘ A), B , ACB 
ie bt eee Rap —— ——— mer wa 
ulate bataaen” 


2.2.3. Dependences z, are placed in sequence in the data base. 
2.2.3.1. If z=Ak), then a, ...=Zy. 





3. Sequential placement of characteristics z,={(z,, ..., Z,). 
3.1. —BA————— if I,Ao) for V Aae V, 


much that 25 {5 DE Spe Sor Map (Ma) < May, te, chassersrtie shee > 
— we he ot ogee — 
characteristic =; UAo) is the frequency of generation of document Ja; z=I(z) — 
characteristic z, 1s the algorithmic input for z,. 








3.2. The remaining characteristics are placed in the data bare as in 2.2.1. and 2.2.3. 










developed by an enterprise were processed by several completing planning algorithms: 
“Struktura” application software package’, the “essence-property-relation” method and the 
DBDA software package, adapted for network structures’. 


Comparison of the parameters of the plans produced showed that the orientation of the 
aigurithm toward economic pro assures effectiveness of the user data base 





multiple-key 
running time. At the same time, automatic isolation of subject area i 
of mass examination (cf. 1.1.) assured good data base structural stability. 


The concept and experience of application of this system are presently used to 
develop the COBA system, designed to automate examination and planning of base 
structures for a relational DBMS on a 16-bit microcomputer. 
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[Article by Yu. N. Radko] 


[Text] Future development of the theory and practice of creating databases must be directed 
toward increasing the logical independence of the data stored and improving the “intelligence” 
of modules interpreting user queries'. Database management systems (DBMS) are equipped for 
this purpose with ties to describe subschemas or “external representations,"? and smart 
data access systems are under development’. For databases using the relational data model* °, 
studies are underway to create virtual relation synthesis operators ’. The principal distinction 
of such operators from database subschemas is that they are intended to provide an “external 
representation” to the user regardless of the current status of the database schema. If, as the 
information system is perfected and evolves, the database schema is altered, the corresponding 
subschema descriptions are also altered ay Bp possibly, some application programs. In 
this case, the subschema no longer provides logical independence of database applications. 
Ideal virtual relation generating operators should be free of this shortcoming, since they are to 
provide in some sense “automatic” construction of a relational query formula and, therefore, 
must be tuned to the specific status of the database schema. 


This article describes one method of creating an operator to read virtual relations, as well 
as its practical implementation in the language of relational calculus for the RINES relational 


engine’. 


The method proposed for the synthesis of virtual relations is based on the properties of 
areas of definition of relations in the basic relational data model. It is assumed that the names 
of attributes are unique within the limits of the database schema, reflecting their unique 
“role"®, A sufficient characteristic of any virtual relation is then its schema — the list and 
sequence of attributes indicated. Furthermore, attention is accented on one important property 
of the relational data model — it presumes storage in the database of the connections, i.e., 
copies of relations are not attribute-oriented. Permutation of attributes in the relational data 
model should be independent of the representation of the data stored, although it is not 
necessary, though desirable) that the database contain all permutations of relations’. Effective 
implementation of this method requires that the concept of the connection and relation not be 
differentiated as the information is stored and that for a relation of order N its M inversions 

both of the schema and of its example) be stored, obtained in permutation of the attributes. 
condition is satisfied by the RINES engine. 


If the data base has connection, any attribute or group of attributes can equal probability 
be used as a search key, while any projection of a connection acquires the status of an 
independent relation for reading ". These relations will be called homogeneous. For example, 
from a third power connection we can read (considering unary and _ binary): 
3! Sin ging dy Moe pet homogeneous relations. The characteristics of a homogeneous 

ation, as for a virtual relation, include the composition and sequence of its attributes. 
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We represent: J — the number of the current ——— eaten 2 ee Seneewe 
matrix from the top down, JM — the number of the next relation in the connection matrix, IK 
— the number of the current train for the Ah homogeneous relation. 


Step 1. Setting of initial conditions. For all J=1, ..., JM, we set IX=0. The current 
homogeneous relation: /=1. 


Step 2. For all us relations with numbers from / to IM (loop [=I +1) we select 
the next train JK +1 consi its connection with the previous higher homogeneous relations. 
If there is none or [>JM, go to step 3. 


Step 3. J=J-1. If I=0, go to END. Otherwise, step 2. 


If we consider the information processing quantum in this algorithm to be the selection of 
a train, its effectiveness in the sense of processing relevant information depends on the 
duplication of the trains. Then, if in the process of execution of the connection matrix for each 
homogeneous relation a unique, nonrepeating train is always selected, the effectiveness of virtual 
relation synthesis can be said to be 100%. Conversely, the connection matrix must be 
considered potentially redundant if the rithm, when modeled in the general area of 
definition of the virtual relation, does not yield 100% effectiveness. 


For example, suppose a connection matrix consisting of R1, R2, R3 is generated for an RV 
(cf. 1), while the domains of the attributes * 2), B={3,4}, —* D={9}. The 
gener re of definition of RV is shown in Figure 2. Clearly, the subset of possible trains is 

by the structure of the functional dependences. The dotted line shows trains which 
could be selected in relation AC without considering the functional dependences. They are 
duplicated, meaning that the connection matrix is potentially redundant. 


According to the algorithm, the source of duplication of trains of the current homogeneous 
relation in a connection matrix may be any attributes from relations located in the connection 
matrix higher than the current relation, but absent in the current relation. For relation AC 
this would be attribute B. This condition is not met for attribute D, and therefore it does not 
influence the effectiveness of synthesis, which can be easily seen by changing domain D. 


The set of attributes active in homogeneous relations above the current relation is called 
the set of known attributes, which we shall designate AJ, while the set of attributes in the 
current relation will be designated AT. 


Redundancy potential. We shall refer to the number of redundant duplicating trains for a 
certain homogeneous relation from a connection matrix obtained by repeatedly accessing the 
database as a potentially redundant “ae agp relation and represent it as U. Thus, for 
relation AC in the example U=2. The value of U depends on the area of the virtual relation 
attribute domains. And if in the example the areas of the domains are represented as M,, My, 
and Mp, respectively, for relation AC the redundancy potential 


O4c=My° Me MoM, Mo= Qype Qc 
The quantity @ is called the scalar value of the dependency vector of the corresponding 
virtual relation attributes. The direction of the dependency vector is taken from the first left 
attribute in the virtual relation diagram to the right, since it is determined by the order of the 
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attributes in the cartesian product which gives its area of definition. The general formula to 
compute the redundancy potential of the current homogeneous relation is: 


D=Quryar~ r= Gar (Mi\ar~))- (1) 


Since Q is computed the domain thickness, in order to estimate the redundancy 
potential a relational DBMS, its stic facilities should include the function of 
determining the current number of elements in a domain. 


Since the redundancy potential and, therefore, the area of definition of —— 
relations from a connection matrix influences the general set AIIOAT of attributes, when we 
represent the plan of homogeneous relations we must consider all attributes of the set, 
representing the location of attributes from the set AT. For example, for homogeneous 
relations according to Figure 1 we can write: R21(A.C), R31(A..D). 


Attributes bel to AT will be called useful attributes, those represented by the dots 
will be called parasitic attributes. The parasitic attributes to the left of the leftmost useful 
attribute will be called left insignificant attributes, while those written to the right of the 
rightmost useful attributes will be called right insignificant attributes. 


Useful attributes are marked in the rows of the connection matrix by ones. We note that 
if = plan of a homogeneous relation contains no parasitic attributes, its redundancy potential 
is equal to zero. 


First connection matrix optimality criterion. Just as one of the of normalization of a 
relaticu is to decrease potentially duplicated information ll let us as the first optimality 
criterion of a connection matrix minimization of its summary redundancy potential for all rows: 


pert ees, U, (2) 


In the ideal case, U°?*=0. According to (1), this is possible, for example, if Al=@ or the 
connection matrix is constructed of a single homogeneous relation. 


However, the use of criterion (2) does not always yield an ee result. This is 
because the redundancy potential is not an exhaustive characteristic of the properties of a 
homogeneous relation. Thus, 


U po=M -M *Mo- Mg Mo, 
UM; Ms: Mo - M,-Mo 


if M,=Mg, then — q Therefore, it has been suggested that yet another characteristic of 
the eneous on be studied — the strength of the connection. between its attributes. 


In the semantic interpretation, the strength of connection is an indication of the 
“dependence” between useful attributes in a homogeneous relation and determines the “rate” of 
change of values of write attributes with respect to left attributes in its area of definition. The 

of connection between two attributes X and Y is proportional to the number of 
changes of attribute Y with respect to a single change in attribute X. The force of connection 
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is numerically equal to the specific portion of nonduplicated trains in the area of definition of 
the homogeneous relation without consi the insignificant, parasitic attributes. If / is the 
force of connection, by definition: Iyyg. =Qrysz/Qr y = Qaql V. 


bl gp Co ce earache ee 


Based on the force of connection wit): identical redun potential, we shall consider a 
homogeneous relation with greater force of connection to be . The maximum force of 
connection is equal to one, the minimum does not reach zero due to the finite nature of any 
domain. 


General connection matrix optimality criterion. Let us combine the two characteristics of 
a homogeneous relation into one. For each row of the connection matrix we introduce the 


quantity 
R=UJ/T=V+(Qyi\yr-1); 


where R is called the resistance of the homogeneous relation. Then the general optimality 
criterion of the connection matrix is: 


min} R Asopt (3) 


In other words, the combination of hom us relations to generate a virtual 
(optimal connection ‘matrix) relation must be consi that for which the sum of resistances 
of the rows is minimal. 


Let us study the problem of checking a connection matrix for correctness of the connection 
operation and for connectedness. 


of connection matrix dependences. Since a connection matrix is an incidence 
matrix of combinatorial configuration, it can be represented as a graph, the points of which are 
the attributes, while the lines are the rows of the connection matrix. We shall refer to such a 
graph as the dependence graph of a connection matrix or simply the graph of the connection 
matrix (cf. Figure 1). The graph of a connection matrix is an oriented graph. The orientation 
of ita tines fo Selected in thet ditection of “functional dependence” between attributes. Thus, for 
line AB, direction from A to B means that the key in relation R1 is attribute A. The graph of 
a connection matrix may consist of points and hyperpoints. Let us present the full graph of 
dependences for our example database, constructed according to these requirements (Figure 3). 


In the full graph, the artificially introduced points (attributes) X are represented as 
hyperpoints, representing group keys consisting of more than one attribute. A hyperpoint is 
always connected with its “daughter” points (attributes which make it up as a semantic key) 
by outgoing lines. Clearly, at least two lines always originate here. 


The dependency graph of a connection matrix is used to check the correctness of 
construction of the connection matrix in terms of the connection operation. The checking 
method suggested is based on the theorem of the source of a connection result proven in the 
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axioms of Armstrong’. In our case, the result of the connection is a virtual relation. We can 
affirm that the connection matrix is constructed correctly if it has a homogeneous relation such 
that its probable semantic key is a probable key for all virtual relation diagrams, i.e., the 
virtual relation functionally depends on this key. Such a key is called a source or root of the 
virtual relation. 


Let us interpret this conclusion using the connection matrix graph. The connection matrix 
is constructed correctly in the sense of the connection operation if its graph contains a point or 
hyperpoint from which any other graph point (except the hyperpoint) can be reached in the 
direction of the “functional dependence” for the lines of the graph. For the graph of Figure 1, 
this point is that of attribute A. It follows from this that if the graph of a connection matrix a 
can be represented as an oriented tree, the connection matrix is properly constructed. For 
comparison, Figure 4 shows improper connection matrices and their graphs which may be 


generated during RV synthesis. 
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In another statement, the task of seeking a correct and optimal connection matrix can be 
looked upon as the task of seeking an oriented partial dependency graph constructed in the set 
of attributes of the plan of a virtual relation. This article does not analyze the versions of 
application of known combinatorial algorithms to seek the minimum tree trunk". 


The method we have suggested for testing a connection matrix for correct connections can 
also be applied to a connection matrix which has been constructed, as in the process of its 
creation, to select the next row. This allows immediate rejection of homogeneous relations 
which do not meet the condition of correct connection, and construction only of correct 
connection matrices. Obviously, the algorithm for selecting homogeneous relations in this case 
is recursive, which is confirmed by practical implementation. 


Synthesis of transitive dependence. A special case is possible in the synthesis of a virtual 
relation, in which the graph of the connection matrix is unconnected. For example, it is 
necessary to obtain the virtual relation RV2 (B, FE). Looking at the dependency graph of 
Figure 3, we see that there is no direct connection between attributes B and E. The connection 
matrix obtained will have an unconnected graph, or in other words will be undefined. To 
eliminate the uncertainty, it has been suggested that the plan of the assigned virtual relation be 
expanded by the inclusion of one or more transitive attributes. This expansion should be 
“invisible” to the user. The optimal transitive attribute can be selected using criterion (3). 
Thus, the virtual relation is converted to RV2(B, C, E) (cf. Figure 3). Detailed analysis of the 
— — to search for optimal transitive attributes is rather complex and will not be 


Practical virtual relation :ynthesis operators may be limited as to the degree of 
uncertainty which can be elin od from the connection matrix, i.e., the number of transitive 
attributes introduced to the connection matrix for one pair of unconnected attributes. Thus, 
the RINES relational converter® can eliminate first-order uncertainty in a connection matrix. 
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Synthesis time optimisation. Su as a result of synthesis of a virtual relation a 
connection matrix is obtained (Figure 1 , Let us now show that permutation of connection 
matrix columns (without disrupting optimality) can significantly influence the time required to 
execute the homogeneous relation connection rithm. To do this, we introduce the concept 
of the connection matrix execution graph. Just as for the connections graph, in the execution 
graph the points are the attributes of the virtual relation, while the lines are the rows of the 
connection matrix. The difference is in the orientation of the line: For the execution graph 
they are not oriented in the direction of functional dependence, but rather in the direction of 
the dependence vector. Furthermore, the execution graph does not require the use of 

ints. For example, for the connection matrix of Figure 1 the execution graph 
corresponds to its dependency graph. Figure 5 shows execution graphs obtained by permutation 
of connection matrix columns (cf. Figure 1). Their lines ar oriented according to the changing 


direction of the dependency vector. 
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In order to estimate the connection time of homogeneous relations, let us introduce the 
concept of the moment of connection between a pair of attributes. For the pair AB, the 
moment of connection is defined as: 





li 





— — « & 
oe CHO 











M ,5=M,/M,. 


Moment M,, is equal to the number of trains in the area of definition of the relation AB, 
for which attribute A has the same value. Then the total number of database accesses require 
to extract RV according to the graph of Figure 1 can be estimated as: 


D=M,-(M,g+Mjc+M,p)=My+Mect+Mp, 
while the estimates of the number of database accesses for the graphs of Figure 5 are: 


L=M,-M,,°:(M M,,=MAM 
YAR ool A ph YA 


We can see from these expressions that the connection matrix of Figure 1 is clearly inferior in 
terms of execution effectiveness to its equivalents shown in Figure 5. This leads us to the 
conclusion: In a virtual relation, permutation of the columns of an optimal connection matrix 
determines the rate of information generation. The time can be estimated from the execution 
graphs by the use of the connection moments. This is clearly illustrated by analysis of any 
example of virtual relation RV. 


It is interesting that computation of the connection moments leads us to some of the 
features of the query decomposition algorithm used in the QUEL language! ‘2. 


Specifics of practical implementation. The method we have suggested for synthesis of 
virtual relations requires that the following steps be performed. 
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1. Set list and sequence of virtual relation attributes. 


2. Find optimal (minimum resistance) and correct (in terms of connections) connection 
matrices. 


3. Check connection matrix for connectedness of its graph, if necessary seek optimal 
transitive attributes. If transitive attributes cannot be defined, the virtual relation cannot be 


synthesized 


4. Optimize connection matrix execution algorithm by permutation of its columns, 
determine final form of connection matrix. 


5. Produce virtual relation by connecting homogeneous relations with respect to 
connection matrix rows. 


In practice, the method is implemented as an operator for reading of virtual trains, a 
supplement to the RINES One peculiarity of the databases used is that a full set of 
inversions for each loaded train is generated for each relation defined in the database. This 
assures connection in the database. 


The operator is divided into two parts: The connection matrix synthesis module, the 
input of which receives a list of virtual relation attributes, and the virtual train generator 
module. The modules can be called in PL/1 by means of the CALL operator, formatted by the 
preprocessor facilities. A virtual relation is generated by a single call to the connection matrix 
synthesis module, which creates it in the form of a bit matrix with a row length f 16 bits 
(maximum content of virtual relation up to 8 attributes). The virtual train generator module 
must then be called in the loop before the end train characteristic is reached, and sent to the 
entry of the connection matrix. As the loop executes, the value of the next virtual relation 
train will be selected from the database in PL/1 variables. 


The following simplifications of theoretical analysis were tested in the construction of the 
connection matrix synthesis module. The module was constructed on the assumption that the 
optimal connection matrix has the minimum number of rows. It can then be synthesized in a 
single pass if the following rule is used to select each subsequent connection matrix row: A row 
produces an optimal connection matrix if it has, first of all, the maximum number of “known” 
attributes — maxQ,)-,7, plus the maximum of “unknown” attributes — maxQ, ry a1 and does 


not violate correctness of connection of homogeneous relations. 


With the additional condition of equality of all domain ranges, the connection matrix 
algorithm is made still simpler, while the recursive connection matrix synthesis module is 
decreased in size to 200-300 PL/1 operators (not including database access operators). In spite 
of this, correct connection matrixs were generated in experimental operations for all of the 
requested virtual relations (over 100) in a commercial database with the following char- 
acteristics: Number of attributes — 140, connections (relations) — 153, of which 148 were 
binary, 5 were trinary. 


It was noted that the effectiveness of generation of virtual relation was determined by the 
time required to select homogeneous relations from the database, in comparison with which the 
time required to synthesize the connection matrix was negligible. 
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seats Roope sage ——— — ere een eee 
pulses, increasing t tegrated microcircui rer pm 
iieve pikend 08 tequanenth on electrophysical parameters of printed 
boards: Electrical capacitance, inductance, connecting line wave impedance, specific signal 
propagation delay in lines, effective dielectric permeability. 


Digital integrated TTL microcircuits with Schottky diodes (TTLS) and emitter-coupled 
logic (ECL) are used to construct high-speed digital circuits, ee times from one 
logic state to another of a few nanoseconds or less'. The development of scientific programs for 
the creation of superfast integrated circuits continues to decrease switching times*. Very fast 
digital modules based on these microcircuits can operate at clock frequencies of hundreds of 
megaherts, meaning that the transmission of logic ee cee ae 
communications lines, including within printed circuit requires transmission of 
frequencies of several hundreds of megaherts. For example, the lading ogo of «1 
requires that communications lines carry spectral components at frequencies of up to 265 
At such high frequencies, requiring preservation of wave impedance on printed-circuit 
communications lines, matched lines are desirable. Furthermore, as the speed of 3 
microcircuits increases, the permissible noise level at circuit inputs decreases. The amplit 
Sain GANT catur Gil te CUUNEE Ue TaGMaaT ankles GAD Taeatnee gnddinenn © enue 
lines, one acting as a source of noise for the other. 


— gemma ag erly Ae feat me deny ay tether there ph 
LSI microprocessor sets. Signal delays in individual bus lines must not exceed the 


The following main tasks must therefore be undertaken in the design of printed circuit 
boards for noise-tolerant, high-speed digital modules. 


1 
2. Calculation of propagation delays for signals and reflected noise in connecting lines, 
comparison of the values obtained with permissible values and determination of the need to 


Calculation of cross talk levels and their minimization by design methods. 


3 
The solution of these problems, related to the problem of internal electromagnetic 
pe , must be produced in the board design stage, since the electrophysical para- 


connecting lines are determined by the geometric parameters of the ted circuit 
board after the layout stage is completed. sa 
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Known printed circuit board automatic design systems are intended to solve topologic 
problems of placement of elements and layout of connecting paths, — ne pg sr pm 
of design and technological d >cumentation*. However, it must be considered more 
create CADD systems permitting additional computation of the electrical parameters of on 
and noise levels in them to allow timely modification of layouts if necessary. One example of 
this approach is the NESSY design system’. 


In this article, we present the results of development of a subsystem for automatic 


— of printed circuit boards and modules considering internal electromagnetic compati- 
bility (SAPR : 'VEMS), which can meet digital module noise-tolerance requirements. 


Design of the SAPR VEMS subysten. The SAPR VEMS subsystem®™ is implemented 

the ARM hardware system, based on the SM-4 microcomputer. The subsystem utilizes 
the standard shared-function real-time operating system RAFOS®, the advantages of which 
include rapid reaction to external actions, simplicity and ease of use, high effectiveness and 
simple time sharing among several users, the ability to construct complete systems, consisting 
of RAFOS and application programs. The system can be operated by unsophisticated users. 


The main programming language used in the system is FORTRAN. Interaction of 
application programs in the subsystem is organized using the PAGEN macroprocessor’. 


As ams in the subsystem run, information input by users is verified (syntax or data 
value check), and training-reference information is generated by the system of application 
programs. 


Composition and organization of the SAPR VEMS subsystem. The SAPR VEMS 
subsystem is a system of application programs designed for engineering computation of 
electrical parameters of printed circuit units, distortion of signals in individual connecting lines 
on circuit boards, as well as the level of cross talk between two adjacent conductors. These 
calculations are related to the tradition tasks of topologic planning — layouts of elements and 
connection paths. A structural diagram of information exchange in SAPR VEMS is shown in 
the figure. The subsystem includes the following programs: 


CAPCAL — calculation of capacitance parameters of printed circuits; 
INCAL — calculation of inductive parameters of printed circuits; 
RESCAL — calculation of connecting line wave impedances; 


REFLEC — calculation of signal distortions in connecting lines due to reflection noise 
mismatch; 


CROSS— calculation of cross talk noise levels. 
SAPR VEMS software. Computation of capacitive parameters of a printed circuit unit is 


* —* planning stage, since these parameters virtually determine the quality of functioning 
a module. 
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During quasistatic analysis of connecting lines, the capacitive parameters of the line 
determine its inductive parameters and wave impedance, which, in turn, allows computation of 
the reflection noise and cross talk. 


To main methods have been developed to compute printed circuit parameters: The 
ee ee ee ee ee 
method 
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Key: 1, Display; 2, program 1 CAPCAL;3, program 2 INCAL; 4, 
N; 5, full-screen text editor; 6, CADD database; 7, data file 


in YaGTI format; 8, output information formatting program; 9, 
graphic display; 10, plotter (preparation of design documentation); 11, 
plotter (preparation of photographic originals); 12, generation of punch 
taper to control process equipm-nt; 13, graphic information encoder 
14, data file in coding format; 15, YaGTI file formatting program 


The former of these methods is based on the indirect method of boundary elements, 
presuming the presence of a Green function for a heterogeneous unlimited area and discreti- 
zation of the surfaces of the printed circuit conductors using the method of moments to describe 
the distribution of charges in it. Printed circuit board capacity parameters are calculated by 
p mamecrgpenay: ype event tbr cigeence gone to ctype hes age The approximation of 
charges on surfaces of these areas is selected depending on the placement density of 
conductors on the board and may be either a pulsed or stepped approximation. 


The modified method of finite elements requires discretization of a certain volume 
containing the computation fragment of the printed circuit board into elements of finite 
dimensions. The Laplace equation for the electric field of the system of conductors is replaced 
by a ee ee eee allowing determination of the potential function at 
individual field points with fixed boundary conditions. The values of the potential function 
near the surfaces of electrodes can be used to determine the desired electrical parameter. 
——— oh ait tags te: tin maitin® coats it to be used practically without limitations as to 
environmental parameters and electrode configuration. 
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for 
The cross talk level is estimated for the beginning and end of a connecting line through the 
capacitive and inductive coupling coefficients’. 





The header module sends a message to the terminal concerning suggested calculation 
methods, a brief technical description of the methods and recommendations for the use of each 
method, then transfers control to the task-oriented module which is selected. 


The control module sends to the device selected by the user (terminal, plotter, display, 
printer) the results of computation and transfers control to the operating system monitor. 
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Machine time on an SM-4 computer is 5 minutes for computation of circuit board 
parameters, 1-2 minutes for computation of reflection noise and the same amount of time for 
estimation of cross talk noise. 


The ye rey in using the SAPR VEMS subsystem has shown its effectiveness for 
a = ded printed circuit boards for high-speed devices and microprocessor 
equipment. 
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ext] Introduction. In the process of automation systems, the CADD developer must 
—* — 
effects. Here are some of them: 


— Overcoming difficulties related to the significant interrelationship of planning results at 
various system hierarchy levels; 


— development of methods reducing the volume of replanning required when 
slight changes are made to ini data; 


t of viable tomati hich to in 
neat ae Sea st oe oe » oe 


— flexible restructuring and access to initial data for the planning process in general, as 
well as each individual stage. 


Therefore, at present one of the important component parts of an automated 
parece a omg dimc ange ipa panes The use of a centralized data source and unifi 
Se God tile eaabena Gases Gh caus of Eakctan nee 4k 
competing and also significantly decrease the cost of information servicing and 
storage. 


System design principle. An integrated automated planning system should include 
subsystems to automate all stages involved in planning computer equipment — circuit design 
and structural design, technological preparation of production facilities. 


In this article we studied a subsystem for generation of text documents for circuit and 
structural design. 


Text document planning subsystems place special emphasis on independence of software 
from stored data structures and output document formats. Therefore, there must be a universal 
data access apparatus to assure subsystem flexibility. 


The IKAR automated planning system‘ contains a subsystem for output of text documents 
which is constructed using the DIAZ DBMS data manipulation language. The subsystem 


performs the following functions (cf. Figure): 


— Construction of a “pattern” element list from the results of synthesis of the electrical 
circuit, using certificate data on available elements from a product library; 
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— sorting of information on the element in accordance with the requirements of a specific 
text document; 


— printout of documents using a pattern describing the output document format. 


synthesis of an electrical circuit, each component product is assigned a unique 
code, which the text document formatting programs use to construct a component product 
frame with the aid of the DBMS in a single examination of the standard data library. 


The standard data library of component products contains the characteristics of these 
products and is or as a data set consisting of various segments of variable length. In 
order to restrict the component product library to reasonable limits, the products used in 
objects to be planned were o . Products, the numbers of t of which is limited to a 
few hundreds, have unique (for example, microcircuits, , etc.). Products, the 
number of standard types and sizes of which is in the thousands, are grouped according to the 
most variable parameters. 


For example, the total number of resistors which can be used is 


S= ! M-E-T-B-K. 
del 


where m is the number of resistor types permitted for use (MLT VS, etc.); M is the number of 
standard power ratings (0.125 W, 0.5 W, ...); E is the number of gradations in the nominal 
units of measurement (Ohm, kOhm, MOhm); T is the number of precision characteristics for 
the type (0.5%, 2%, ...); B is the number of product utilization versions; K is the number of 


It is obvious here that the parameters M, E, T and B can take on a few (dozens) of 
values, while K could take on tens of thousands of values. Therefore, grouping of products 
without considering nominal values decreases the number of standard fate sets by several 
orders of magnitude. The nominal value can be used as a modifier with its value verified as to 
agreement with the permissible nominal values. 


The use of this method for design and operation of the library of component products has 
significantly decreased the cost in machine time for processing of component product standard 
data. 


The standard data for component products include the following characteristics: Full 
name of product, type of product, electrical parameters, foreign analogues, reliability 
parameters, delivery document, usage requirements, mass and dimensions. 


Maintenance of the library of component products and document formats is performed by 
the dialog facilities of the DIAZ DBMS, allowing on-line retrieval, checking and editing of 
information in the database. 
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Key: 1, Product planning assignment; 2, component product 
frame formatting; 3, component product library; 4, kno base 
DBMS; 5, document format library; 6, component product e; 
7, data description frames; 8, DBMS; 9, element list planning; 10, 
purchased part register planning; 11, specification planning; 12, 
documents for material and equipment supply problems; 13, 
CADD, GAP [expansion not given]; 14, hard copy of document; 
15, description of document. 


Document planning application programs are constructed on the basis of a specialized data 
access language which can be used in programs written in FORTRAN, PL or assembler’. 


When working with the data manipulation language, the user need not know the location 
of information in peripheral storage or its storage structure. He can access data at the level of 
logical segments and requisites, the names of elements in the area of interest. This allows great 
attention to be given to the functional specifics of programs which, in turn, generally increases 
the level of reliability of application ams. A tabular language is used to describe the 
storage structures, allowing description of a broad class of data structures. The abbreviated 
language syntax can be represented as Bakus-Naure records: 


<data set>:=<set name><set type>; 
<segment>:=<segment name><segment length>; 
<requisite>:=<requisite name><requisite address in segment> 
<logical and physical length of requisite> 
<logical and physical format of requisite> 
<permissible values of requisite>. 
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The method of conveyor processing is used to format text documents. The input of the 
subsystem receives a “clean pattern,” containing only a description of the document format. As 
ure 


— ane Se See each functional , utilising the data struct 
—— l e, inserts needed information. To the format of an output 
on a pattern —— and data structure description must be 


—J ——— ot le Peete to thomas data processing, independent of data 
structures, allows standardization of a number of programs for planning of various document 


types. 


A significant place in the text document formation subsystems for computer equipment 
design is occupied by the program which sorts the names of component products in accordance 
with the requirements of the state standards and technical conditionis. To make the software 
independent of the format in which names are stored in the system, a product name structure 
description metalanguage has been developed. This is used to describe the names of 
requisites and the sequence of their use in names. After all sorting stages are completed, the 
necessary requisites are combined into a single requisite. 


Certain difficulties arose in the sorting of Russian-English text due to the lack of a 
combined table of characters of the two languages. A combined table of upper and lower case 
letters in the two alphabets should be created, with codes in alphabetical order. The author is 
in full agreement with M. I. Belyakov in this respect (cf. Appendix of*). 


Conclusion. The organization of the system suggested in this work for operation on a type 
YeS1055M computer is now in use as a part of an integrated automated computer equipment 
planning system. Work is now in process on increasing the power of the DBMS and the text 


document planning system. 
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“Kulon” interactive graphic system is insufficient. A 
— © Se ee eee ee eee However, in 


description using the expanded set' is too cumbersome for practical application. 


Furthermore, in the development of topology parameters it is frequently necessary to 
c elements in ways which are not supported by standard editing facilities 


modify 

(changing the number of turns in spiral elements, individual element parameters, the number of 
cross pieces in a control grid, etc.). In practice, such elements must be generated as new 
elements, which also significantly increases planning time. 


The approach suggested in this work and the further development of the “Kulon” 
interactive graphic system software allow generation of topologic elements based on a formula 
description of their geometry. The elements are described by a certain set of parameters 
defined by the developer, changing of which in dialogue mode produces the necessary topology 
modification. 


Formation of topologies using parametric elements. Let us describe the facilities of the 
new method for generation of topologies. Let us take for example the task of generating 
preparation programs on the KPA-1200 device for eddy-current sensor masks for testing quality 
of wire and paths. This type of topology is shown in Figure 1. It was described using an 
approximate representation of a spiral as a curve consisting of circular arcs. To encompass the 
variety of such topologies and provide sufficient accuracy, four standard elements had to be 
introduced — spirals with different combinations of characteristics: Right hand and left hand 
spirals, the last incomplete turn larger than 180° ,smaller than 180°. 


To assign a parametric element (by which we refer to typical elements, emphasizing their 
dependence on parameters), the grammatical rules must be used to formulate text containi 
the formula description. We present below a description of one of the four elements mentio 
above (shown in Figure 2). The line number is not included in the text of a description. It is 
used for reference in the following commentaries. 
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10. 

ll. (2— cosa-+-sina — cosb-+-sinb) kd/8=c 
12. (1 — cosa+sina) kd/8=e 

13. 

14, 

15. P(t2kcosb, toksinb) 

16. P((r-+c-+-d(n — 1)) cosh, (r-+-c-+-d - 1)) aesinb) 
17. >P(—d/8, 4/8) 

18. n—1 

19. P(r-+-e+d (n — k), 0) 

20. >P(d/8, 4/8) 

21. P(0, —r —e— dx (n — k) +d/4) 
22. >P(d/8, —d/8) 

23. P(—r —«—d + (n —k)-+-d/2, 0) 
24. >P (—d/8, —d/8) 

25. P(O0, Son * (n—k)— 3% 4/4) 
26. >P(—d/8, 4/8). 

27. P(r + e, 0) 

28. >P(d/8, 4/8) 

29. P(r sk cosa, —r sina) 

30. P(p cosa, —p > sina) 


Lines 1-9 list the parameters of the first type. To generate specific topologies, these 
set by the user. They may be numbers (in which case their values are input 


through the character display) or points, i.e., pairs of numbers (in which case the parameters 
— A) 


| 

















Example of Eddy-Current Sensor 
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may be input through a character display or by pointing at the spot using a marker on a 
c display screen). Number parameters and point parameters are represented 

wer-case and upper-case Latin letters. All parameters listed in these lines (except n and h 
are shown in Figure 2; n is the number of turns of the spiral, including the last, incomplete 
turn, h is the angle of rotation of the local system of coordinates relative to the coordinate 


system of the drawing. The permissible values of parameters a and b are: 0<a{90° , 0<<90". 


Lines 11 and 12 continue the list and define the supplementary parameters used to simplify and 
abbreviate the text. 


i 




















- 


Topology Fragment 


The description of a parametric element is a description of its boundary as a sequence of 
line sections and arcs. Line pairs 15, 16 and 29, 30 describe sectors connecting points. Lines 
16, 17 and 19, 19-21, 21-23, etc. describe arcs which have an origin, center and end at the 
corresponding points (moving clockwise). Parametric elements can be described by organizing a 
loop: Lines 19-26 are repeated n-1 times, k taking on values of 1, 2, ..., n-1. 


The description lines contain formulas expressing the variation of point coordinates on 
parameters with respect to the local coordinate system. 


The text describing a parametric element in the graphic language is the program for 
generation of a specific element of this type based on the assigned parameter values. Within 
the framework of the expansion of “Kulon,” implementing the method suggested, this is done 
by means of a graphic editor. 


The new function “parametric element” is added to the DRAW mode, to be accessed using 
the name of the element and values of the parameters of the element input by the user, 
generating the element which is then placed in the output file as a set of “line segment” and 

arc” figures and is displayed on the graphic display screen. 


The mask shown in Figure 1 can be described by three types of elements: A rectangle and 
two types of spirals. 
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Inclusion of additional programming facilities in the “Kulon” interactive graphic system 
software. The procedure for making changes to the graphic editor is worthy of attention. 


Since any access to a DRAW function is preceded by a search for the code of the function 
in a table, adding a new function requires that its code be included her with a reference to 
the corresponding overlay in the table. The “arc” function was excl from the table, which 
caused no loss, since an arc can be defined as a parametric element. 

This 


All remaining changes related to entry of a new function were made in the ENIC overlay. 
0 was 8 ed to process the new function because it processes the “cell” function 
and contains many subroutines which can be used to process the “parametric element.” 


As the modules with the ENIC overlay were configured, its text was not used. All 
modules included in the overlay were added as machine-language programs at the end of the 
overlay. When it was necessary to make changes within the overlay, the corresponding group 
of instructions was replaced with a new group occupying the same memory area with transfers, 
if necessary, to instructions placed at the end of the overlay. 


When control is transferred to an overlay, redistribution by functions wer gns Bet the 
table is performed. The code for the function “parametric element” was included ( ) to 
the overlay function table, together with the address where the corresponding subroutine was 
located. 


The “parametric element” function is processed by universal overlay subroutines, as well 
as subroutines in the resident portion of DRAW. Some of the former subroutines were modified 
to allow their use with parametric elements. These changes created additional capabilities for 

of other ENIC overlay functions as well. In particular, it became impossible to use 
two methods to assign coordinate points (see above). 


of a new function utilizes standard buffers and working locations, particularly 
the topology description buffer (where information on figures is initially generated), buffers to 
read and write portions of a graphic file. When working with them, the possibility must be 
considered of their utilization by subroutines and functions which may be accessed as the 
parametric element is generated and also, when possible, “damage” to them should be avoided, 
if necessary by saving it and restoring their contents. 


Interpretation of formulas descriptions of typical graphic elements. The software 
implementing this function is essentially an interpreter for the formula descriptions of standard 
graphic elements. Let us say a few words concerning the peculiarities of the interpreter used. 


Text is processed in two stages. The first stage forms special p or preliminary 
processing of the text file TEST. Grammatical analysis is not perfo here, rather merely 
the fact of inclusion of the chain of characters in the language is verified. The algorithm used 
is based on the principle of the finite automatan?. The program diagnoses the grammatical 
errors found: It indicates the text location where an error occurred. If an error is detected, the 
user must edit the text and access the program again. 


The second stage occurs during processing of the new “parametric element” function, 
included in the DRAW mode. It includes the actual grammatical analysis and performance of 
actions called for in the formula description. The program uses the formulas to calculate the 
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values of coordinates of characteristic points on a parametric element and generates the output 
graphic file. It is assumed in this stage that the sequence of symbols is clearly represented in 
the grammar, avoiding checking which would be necessary to avoid loops or accessing forbidden 
addresses, and also to generate and output diagnostic messages on errors if the input sequence 
of symbols were assumed arbitrary. This reduces program size and running time. 


Conclusion. The entry of new standard graphic elements by formula description expands 
the capabilities of the 15-UT-4-017 “Kulon” interactive graphic system. Their use in planning 
the topology of microwave-band hybrid in circuits and in many other cases significantly 
facilitates the process of manufacture of . We should also note that this approach can be 
used to create systems for automated design of products based on preliminary parametric 
descriptions of standard structural elements, which are subsequently utilized to generate 
drawings of a product and its individual units. 
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— We shall see a basically new approach to the solution of problems related to 
cal and prediction of situations in various ecological systems, as well as problems of 
evaluating the situation in dynamic natural environments considering technogenic actions. 


Statement of problems. We need to develop an effective computing system which will 
satisfy the following basic requirements: 


— Allow description of a regional task as a sequence of initial factographic maps, usually 
read by specialists in the subject area; 


— automatically input maps with arbitrary contour configurations for subsequent 
semiautomatic classification of the maps, and also support the process of combining these maps 
with air and space survey data; 


— analyze regions with practically any degree of detail, as dictated by the detail level of 
available maps relating to each factor; 


— allow timely access to any point in the region in question with selection of the entire 
vector of factors required to perform a task; 


— support automatic display of initial, intermediate and resultant data in the form of 
maps on color raster displays considering the requirements for cartographic data representation; 


— correct data in any stage of processing using facilities for graphic dialog with a 
cartographic database; 


— connect application tasks to the system and allow operational interaction with 
databases of many dimensions; 


— generate report documentation as hard copies of the resultant maps on photographic 
film or paper. 


Expansion of each of these tasks is a rather complex scientific and technical problem; 
therefore, let us discuss just a few key aspects, the solution of which, taken together, would 
allow the creation of an effective computer system and performance of a number of practically 
important prognostic calculations on the system. 


Selection of basic computing facilities. The major starting point for development of a 
system of this class is selection of the computer equipment and its software. 
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volumes of magnetic disk peripheral storage (hundreds to thousands of 


— 
— rapid processing by the central processor (1-3 million operations per second); 


— availability of four color raster display processors and effective raster machine graphics 
software; 


— the capability of rapid and automatic input of images from photographic film with 
subsequent interactive image improvement; 


— well developed digital image processing software; 
— access to all system resouices by a large number of users (up to 16); 
— system reliability and compactness. 


Geoinformation system. The methodologic principle of the method is representation of all 
factors related to the ecological problem as thematic maps (for example landscape, weather, 
vegetation and other maps). Each thematic map is correlated to the topographic map of the 


the screen. 


The thematic maps of a region consist of individual fragments (plots), usually tied in with 
the corresponding topographic map plot. Each fragment logically represents a rectangular scan 
field of points consisting of N, lines of N, elements each. A point of a thematic map has a 
description, a code in the cotresponding thematic classifier, one byte in size. For 
characteristic measurement for a - eager: Da finer gg a yo 
N,=N,=700, yielding a file size of 0.49 Mbytes. 


Each detailed map for a large territory contains large volumes of information, and if we 
consider the number of thematic maps, the total volume of data exceeds the available disk 
memory on the system. Therefore, the DELTA system uses automatic compression of maps 
before they are entered into the database, and eacl program reads the maps it requires using a 
standard system-wide raster image restoration function before the image is placed in computer 


memory. 
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The experience of industrial use of the system indicates that the compression factor of data 
in the data base is 10-50. Construction of a full raster map from a compressed 
occurs in real time within 1-5 seconds, which is quite satisfactory for this class of problems. 


To support automatic joining of separate map plots to select data from an arbitrary 


Method for creating thematic maps. Before entry into the system, a map is classified as to 
its theme in accordance with the related problems. The result is a thematic map tied in with 
the topographic map of the appropriate scale. 


The following sequence of actions is performed for each plot to tie it in with the 
geoinformation system. 
1. Contours delimiting areas with identical classification codes are drawn onto transparent 


plastic film, then the copy is photographed in reduced scale. Reference points are entered on 
the copy for subsequent geometric correction of the map. 


2. The UVVI-200 device, manufactured by Karl Zeiss Jena (East Germany) is used to 
generate a raster half tone map image from the photographic film. 


3. The image is examined on the screen in full scale (maps are usually encoded at a 
resolution of 1024x1024 points), then improved by digital filtering, brightness adjusted, 
The result is an image with contrasting figures on a black field. 


etc. 
4. The PAINT graphic editor is then used to color all areas in semiautomatic mode: The 
system selects the next “uncolored” area and requests its classification code; after the is 
input by the operator it is extended to the entire area. After this, the system guides the 
operator to the next area, continuing until the entire plot is filled. The mean time required to 
color a rather well saturated 1:100,000 scale landscape plot is 45 minutes. 


5. The separating contours between the areas are then erased by entering an instruction 
in the PAINT editor program. 


6. The cursor (using the PAINT program) is then used to mark reference points, after 
which automatic geometric map correction is performed. As a result the plot is tied in to the 
standard scale (N,xN,) and entered into the geoinformation system in compressed form. 


Automatic generation of new thematic maps. The system can generate maps reflecting 
environmental properties of interest to specialists in graphic form. This can be 
naturally, only if the influence of initial factors on the resulting function has been formalized. 
A typical example is the process of generating maps illustrating the risk of contamination of 
various media with various substances. In such cases, the initial information is found on maps 
of constant environmental factors (landscapes, vegetation, ground water depths, weather data, 
etc.), to which the system provides access by an application program. The program constructs 
values of the output function at each point, thus automatically constructing necessary thematic 
map in the database, which, in turn, may serve as a basis for subsequence computations and 
expert estimates. 
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Processing of half-tone . The system allows half-tone images (such as serial 
ony wig Bag be combined with thematic maps. The procedure for p ng a half-tone 
for this application involves using the graphic editor as follows. First the image is 
entered by the UUVI-200 device, then brightness adaptation is performed and ihe required 
number of brightness bands is distinguished. After this, geometric correction occurs with 
correlation to the corresponding topographic map plot. Subsequently, there is thematic maps 
can be entered on the image in the combinations required by the operator. Most frequently 
used for these purposes are general purpose thematic maps: The river network, administrative 
subdivisions, highways, etc. 
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[Text] Introduction. Digital signal processing methods are widely used in many areas of 

science and technology. With massive automation, practical implementation of digital 
became possible with the willy ay voy of highly productive, inexpensive computer 

hardware, as well as specialized devi data processing with very high speed and accuracy. 


Implementation of spectral-correlation analysis and filtration algorithms occupies a special 
position in digital processing’. The area of their application is quite broad — from radar to 
medical diagnosis?. However, implementation of algorithms of these types requires to 
numbers of computations, since Fourier transforms must be computed. This places limitations 
on the use of universal mini- and microcomputers for real-time digital signal eg te. Ray 
requires the use of specialized devices to speed up the execution of the Fourier 
so-called Fourier processors. The throughput of such devices may exceed the capability of 
universal computers for Fourier analysis tasks by two or three orders of magnitude. 


Both in our country and abroad, intensive work is under way on the creation of various 
Fourier processors, and, in particular, processors for real-time signal processing. Development 
of a radar Fourier processor has been announced, implementing a fixed algorithm on samples 
read at a frequency of 30 kHz. Universal Fourier processors with throughput capacities of 
several kilohertz to 1 MHz are also manufactured’. 


A broad class of experiments can be distinguished in scientific research, 
investigation of electric signals in the 1-20 kHz frequency band (for example, in geophysics 
seismology, radio astronomy and radar, as well as analysis of mechanical vibrations’, speech 

! cardiograms and encephalograms in medicine). These experiments require real-time 
(i.e., as ‘the signal arrive) recording and processing of information, the volume of which exceeds 
the memory capacity of modern small computers. 


The SM-1300.1705 computer system with Fourier processor, manufactured at “Energo- 
pribor” experimental plant, is intended for real-time digital signal processing. This article 
describes the software created for the system by the authors. 


Basic characteristics of digital system with Fourier processor. The digital computer 
system is designed for a broad range of problems related to signal investigation. The structure 
of the system is shown in Figure 1. 


An important element of the digital system with Fourier processor is its highly productive 
specialized Fourier processor. This device rapidly performs various versions of spectral analysis, 
calculates mutual spectra, performs nonrecursive filtration and certain supplementary functions. 
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The specialized Fourier processor contains a direct access interface which supports 
communication between the specialized Fourier processor control processor and the common bus 
of the SM computer. The specialized Fourier processor was described in detail in’*, 


The system includes a combined high speed device (UKB-200). This device can digitize 
signals at a rate of 1 MHz. The UKB-200 controller includes « direct access channel supporting 
interaction between the voltage-code converter and the SM computer common bus. 


Digital system with Fourier processor software structure. In developing the software, the 
following requirements were considered: 


— Support for processing and recording of results at the rate of input signal arrival, as 
well as simplicity of user of the digital system with Fourier processor; 


— development of software facilities for effective utilization of the specialized Fourier 
processor and the UKB-200; 


— implementation of software as an application program package to run under the RAFOS 
operating system. 


The structure of the software is shown in Figure 2. The program package is written in 
assembler and FORTRAN. Work with the software is organized in dialogue mode, allowing 
variation of parameters (digitization frequency, transform size, analog information input 
channel), as well as interruption and restarting of processing as desired. 


To decrease the time required to perform processing and the complexity of distribution of 
memory, interaction among the UKB-200, specialized Fourier processor and SM computer 
memory is organized at the physical level. 








The sequence of operation of the digital system with Fourier processor programs is as 
follows: Analog signals enter through the analog data input channels of the UKB-200 to the 
voltage-to-code converter unit (cf. Figure 1) and are converted at the assigned digitization 
frequency to sequences of digital codes, which are sent from the voltage-to-code converter data 
register by the controller through the direct memory access channel into RAM. From computer 
memory, the information is sent through the SPD? by the control processor and then returned 
to RAM, from which, after coding, is stored on magnetic tape. 


The software package is a set of modules (RAFOS system and application program 
modules) supporting the beginning, maintenance and termination of exchange among the 
SM-1300.01, specialized Fourier processor and UKB-200. 


Writing the software package. The basic functions of the software package includes: 


— Assignment of type and mode of processing (loading of direct access interface address 
— containing the information required to organize exchange of data between SM-1300.01 
M and the specialized Fourier processor, specialized Fourier processor registers through the 
control processor and loading of the UKB-200 address registers, setting the necessary digiti- 
zation frequency and length of the file to be processed); 
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— information input and output (input to memory and buffering of data files after 
digitization in the voltage-to-code converter, storage of control information in the instruction 
and direct access int status registers and starting of the exchange and processing, 


recording of the results of processing on magnetic tape, processing the end of transfer); 


ce of transforms (computation of direct and inverse digital Fourier — 
utation 


weighti of arrays, scaling of data, computation of the products of arrays, comp 
— as well as computation of the correlation function convolution). 


The system device used is a disk, the medium on which ‘he results of processing are stored 
is magnetic tape. 


Spectral analysis is used to computer the power spectrum of the signal studied. The 
algorithm is based on the digital Fourier transform, implemented in hardware as a fast Fourier 
transform (FFT) algorithm in the base 2. The power spectrum is computed with 
accumulation. @ program supports processing of an actual in real time (i.e., the 
processes of data input, digital Fourier transform computation and results recording occur in 
parallel, without loss of input information). 




















CM-5301,1 



























































Structure of Digital System With Fourier Processor Circuit. 1, 
Processor; 2, disk drive; 3, tape drive; 4, printer; 5, common bus; 6, 
RAM; 7, specialized Fourier processor; 8, direct access interface; 9, 
control processor; 10, direct access channel; 11, voltage-to-code 
converter; 12, input-output channels. 


The mutual correlation analysis program computes the correlation function of two anal 
signals. The algorithm of this program utilizes the digital Fourier transform and the Planch 
convolution theorem’. The direct and inverse digital Fourier transform operations, as well as 
the joint product of two arrays are computed in hardware in the specialized Fourier processor. 
The program allows real-time processing. 
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tal nonrecursive filtration program is designed to compute the convolution of the 
initial and a filter. This convolution is computed similarly to the mutual correlation. 
The digital Fourier transform, inverse digital Fourier transform and multiplication of two 
arrays are performed in hardware by the specialized Fourier processor. 


The 
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The programs for operation with the tape drives control cag shrew Pegg ge cm 
sta of ca SEG to b oe ee to allow analysis of 
produced. in the tape drive subsystem allow the user to enter information in 
mode: Rewind magnetic tape, read, skip several blocks and return several blocks. 


The data processing subsystem includes modules which support reading and output of 
processed information to terminal or printer for each program. 


The programs in the package require no special preparation before use, allow the use of 
additional programs for operations with the magnetic tape and for display of information on 


graphic displays or plotters. Dialog mode allows the user to set the required processing mode 
and trace the processing as it occurs. 


Three test problems are used to verify the correctness of operation of each program in the 
package. The characteristics of the package are presented in the table. 
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Digital System Vith Fourier Processor 
Software Package Characteristics 


Programs Output Parameters Throughput Capacity 


Spectral analysis | Frequency resolu- 10 kis (combined 
tion (up to 1/4096) | readings) 








Real/complex signal | 20 kHs (real readings) 


Signal type: Sine 
wave/noise 


Averaging of results 
(4) 


Mutual correlation | Delay (up to 1024) | Two signals of 5 kis 
analysis Averaging (up to 4) | each (real reading) 


Signal type: Sine 

wave/noise 

Correlating signals 
- real 


Nonrecursive Frequency character-| 5 kHz (complex read- 
filtration istics (up to 1024) | ings) 


Real/complex signal | 10 kHs (real readings) 


Output readings 
(up to 2048) 
Thinning after 
filtering (1 in 4) 
Hote: Quantity of information recorded limited by RAN ca- 
pacity. Output parameters identical: Sise of array 
stored 1/4 input array size, recorded on magnetic tape. 

















Conclusion. The experience gained in creating this system leads to the following 
conclusions. 


1. The current state of development of microprocessor engineering and specialized Fourier 
processors and the construction on their bases of digital system with Fourier processors have 
resulted in additional advantages over the use of universal computers of comparable throughput 


capacity: 
— Decreased system cost with superior characteristics; 











— increased system reliability, decreased requirements on operating conditions, reduced 
dimensions and simplified servicing; 


— reduced data input-output time and simplified processing algorithm. 


2. The characteristics of the tal system with Fourier processor software package 
indicates that this system could be widely used for real-time digital signal processing in various 
areas of science and technology. 
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ext] The effectiveness of personal computers currently manufactured by Soviet industry is 
determined by the level of development of their application software. A number of 
application packages have been developed and are effectively used by 
computers on the 16-bit LSI series K1810 chips (“Neyron 19.66,” YeS1840, “Iskra-1030”). 
The compatibility of these computers with each other and with the JBM PC (USA) allows 
them to use software packages developed both here and abroad. 


Application packages are a class of software oriented toward the user. They usually 
function under the control of an operating system (OS), using all of its capabilities to organize 
input-output operations and interactions with PC hardware resources. The user need not be 
familiar with the details of the organization and structure of the PC and OS. These 
take upon themselves the functions of organizing interaction with the user. This allows a broad 
range of nonprofessional users to take advantage of PCs. 


Depending on the area of application, application programs are divided into two classes — 
general purpose and task-oriented. 


The first class includes programs designed to perform tasks which arise in many spheres of 
human activity (creation and management of text documents, automation of computations, 
ement of information files, processing of graphic information, etc.). The second class 
includes application packages designed to perform special computing tasks (automation of 
printed-circuit planning, automation of processes related to technological preparation of 
production, planning of programs for numerically controlled machine tools, operations in 
technological networks). 


We describe below a few application program packages developed for the “Neyron 19.66” 
personal computer’. As we have noted, they can function without modification on other 
personal computers in this class as well. 


Let us look at some general purpose programs” °. 


NEYRON-TEXT is designed for the creation, editing, formatting and printing of a wide 
variety of text documents — books, reports, explanatory notes and technical documentation. 


With the advent of PCs, the use of “menus” expanded. A menu is a list of options 
divided by the program for the user, which is displayed on the screen. Selection from a menu is 
usually performed by pressing a single key. Menus _ significantly facilitate 
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the use of computers by nonprofessional users and create maximum convenience. NEY- 
RON-TEXT makes extensive use of menus, not only at the main (top) level, appearing when 
the program is started, but also in each mode (editing, formatting, prin 


Another advantage of NEYRON-TEXT is its active use of the function keys (F1-F10), 
programmed in this package to perform a wide variety of ye yeq: functions (insertion and 
deletion of lines and blocks of text, search for and replacement of of text entered, storage 
of a block of text in a requested file or reading of text from a file, etc.). Due to the broad 
capabilities for formatting text (determining page length, line 7 —— of the right 
margin, alteration of spacing between lines, printing of portions of the text in bold type, etc.), 
the quality of documents produced can approximate printed text. 


The experience gained in using NEYRON-TEXT has shown its convenience and 
effectiveness for generation of large volumes of documents. This program was used to develop 
the documentation for the “Neyron 19.66” computer. Future development of the package will 
be directed toward inclusion of facilities for creation of design documentation in accordance 
with the unified standard for design documentation. 


eee eee Pees provides the user with simple and convenient means to 
perform a wide variety of computations in table form. From the mathematical standpoint, the 
program displays F in the form 

F=M-N, 


where M is a matrix of formulas, each position of which contains a computing algorithm; N is 


the set of real numbers. 
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Key: 1, SM—1420; 2, “gateway” PC; 3, single channel; 4, PC; 5, 
nan ble controller; 6, machine tool controller; 7, digital 
controller 
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The user can enter into any position in the table a label, a number or a formula, fixing the 
relationship between other positions (those located above and to the left of the position 
containing the formula). In addition to formulas entered by the user, a library of functions 
built into the program, including a number of arithmetic, logic and trigonometric functions, 
may be used. The library is open for addition. The package features convenient methods for 
movement around the table, insertion and removal of rows and columns, changing output 
format (numbers can be displayed with any desired number of decimal points, in exponential 
form, or in diagrammatic form). It is possible to repeat formulas in various parts of the table 
with identical sends, automatically adjusting the table positions to which they refer. The 
display screen can be divided into two windows, showing fragments of two different tables. 
This program can be widely used for engineering and scientific and technical calculations, as 
well as processing of economic and bookkeeping information. 


NEYRON-BAZA is a relational database manager. Connections between data elements in 
the relational database are organized as two-dimensional labels. The database structure is 
defined by the software package in interactive mode. The user sets the names of fields, their 
types (character, numeric or logical) and length. 


After the structure is defined, data are entered into the database. The package contains 
facilities for editing, insertion and deletion of records, as well as modification of database 
structures. Different databases can be copied or merged. When working with databases, it is 
frequently necessary to sort them according to some key (field). 


NEYRON-BAZA allows sorting by both numeric and character fields. 


Information which has been processed can be printed out as documents in desired formats. 
The format is also determined in interactive mode (header, column headings, their width, 
information content). 


The package can be used to create and manage information-reference and informa- 
tion-retrieval systems, local databases of various types (frame, technological, bookkeeping). 


NEYRON-FAYL is designed to manage information in the form of records. The package 
functions in menu mode and is basically designed to automate management activities, print 
correspondence, output documents of identical format using information stored in a file (notices, 
service records, agendas, etc.). 


Records can be sorted according to any field, subsets can be defined satisfying a given 
condition, documents can be printed in desired formats. The package can be used in library 
and patent work, to automate personnel documentation, account for materials and products, 
etc. 


Large numbers of task-oriented program packages are now under development, intended 
for the solution of special data processing problems. We shall now discuss one of them, 
supplied with the “Neyron 19.66” computer. 


NEYRON-KOP is designed to control instruments and equipment in automated mea- 
surement systems using a general-purpose input-output channel as specified by state standard 
GOST 26.003-80. NEYRON-KOP is based on a BASIC language interpreter. 
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The includes a BASIC interpreter and a set of special subroutines written in 
BASIC to organize exchange of information and control the general purpose channel 
interface to test the interface. 


One of the most important features of the BASIC interpreter from the standpoint of 
and control of the channel is its well developed string-handling facilities, allowing 


isolation of the required portion of a string, comparison of strings, merging of strings, con- 
version of a number to a string and vice versa. 


These capabilities are used to select and process the required data in the sequence of 
messages sent through the channel. Another important feature of the BASIC interpreter is the 
presence of graphic operators and color control operators. This allows information received over 
the channel to be displayed in graphic form and in color. 


Furthermore, the BASIC provides the user with well developed facilities for use of 
program files, as well as direct and sequential access data files. The language includes facilities 
for direct access to input-output ports and memory locations. 


This entire variety of powerful language facilities allows effective utilization for control of 
instruments in an automated measurement system. 


Let us list the major functions of NEYRON-KOP: 


— Initiation of the general purpose channel (this function must be performed before 
beginning operation with the channel); 


— transmission of information over the channel to a device with a desired number (device 
number, data transmitted and delimiter code are transmitted as named variables); 


— transmission of information through the channel in nonaddressed mode; 

— input of information through the channel from a device with a desired number; 

— input of information through the channel in nonaddressed mode; 

— setting and clearing of a remote control signal; 

— querying a numbered device (the result is the device status byte); 

— transmission of a single byte instruction through the channel. 

NEYRON-KOP provides the user with the ability to check the operation of the channel 
interface. For this purpose, the p e includes a special test program. If errors are found in 
the process of testing the channel int , af error message is sent to the screen. 


All of these application program packages are included in NEYRON-DOS1 and operate 
— — control. However, they can also operate under the control of other operating systems 
in this class. 
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Many second generation application packages designed for use in local personal computer 
networks are now under development. 


The general technology of such networks is shown in the Figure. The top level machine is 
an SM-1420-class machine, which, using a “gateway” PC, is connected to the local PC 
network, using a single channel as the data transmission medium. The PC local-area network 
implements the second level of computing devices, the main function of which is planning of 
facilities for controlling equipment at the bottom level. The bottom level includes 
— controllers, numerically controlled machine tools and other direct digital control 

ces. 


The variety of second level PC software packages is determined by the type of computer 
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oo One component part of any automated information system (such as a training stand or 
ADD system with well developed visualization system) is the subsystem supporting 
ee ee ee eee 
simulator). 


an automated system with a “smart” visualization subsystem is based on 

the assumption that the operator, through his visual analyzer, receives the greatest volume of 

to control the dynamic process in real time. We shall analyze a new set 

the problem of visualization in a universal computer. 

The approach suggested can be used for digital synthesis, for example, of an image of a process 
of relative three-dimensional motion of several objects. 


of the initial positions of the objects in the 
the change in the spatial position of the lines of 


ae 
— Imitate the instantaneous positions of the objects visualized in the coordinate system 
coupled with the lines of sight (only rotational motion of objects is simulated, the range of 
rates of rotation being 0.01-10° /s; the spatial position of the vectors of angular rotation 

of the objects is arbitrary); 


— project a set of points defining the instantaneous positions of objects onto a mapping 
plane coinciding with the plane of the display screen or optical observation instrument; 


— construction on the graphic display screen the corresponding object image phases of the 
synthesized subject, to imitate the visual space presented to the operator during training, and 
change it without noticeable flickering. 


Problems of the development and application of synthesizing visualization systems were 
discussed, for example, in'*. However, as a rule these works utilize the vector-matrix method 
of describing motion in the space of modeled objects. 


However, the use of the mathematical apparatus of quaternions for this purpose’, a more 
adequate mechanism for perception of the visual situation model, saves time in the execution of 
the required computations. This is because the line of sight to an observed object is identical 
with the vector portion of a quaternion — the rotation transform operator, while the angular 
motion of an object is interpreted as the vector-function of finite rotation. 
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Digital synthesis of a dynamic visual subject on a graphic display screen can be divided 
into the following major stages. 


1. Development of the data base of modeled objects (sets of coordinates of characteristic 
points in the coupled coordinate system) and loading of data into computer memory. 
Assignment of the initial positions of objects in the inertial coordinate system. 

The images of objects on the graphic display screen are generated by points. Each imaged 
point of each object visualized is the end of a vector R, , of a certain vector set, fixed a priori 
in the form of a data array or three-dimensional matnx, which is a dot-matrix of the 

2. Computation of the direction of a line of sight and the dimensions of the frame 


window. Determination of the values of control signals for the situation model (consisting of 
the instantaneous angular rotation rate components of the objects synthesized). 


3. Generation of quaternions — rotation transform operators A (t), fixing the positions of 
the coordinate systems rigidly coupled with the dynamic objects sim in the inertial 
coordinate system. 

Real rotation of the synthesized objects is approximated by a sequence of successive 
discrete rotations. The resulting three-dimensional rotation as a function of discrete time 
during simulation interval k is then determined by the quaternion product 

A, (RT) = Azy (AT) @Azy_y (AT)® ~~. 9° Az, (AT), 


where =1, 2, 3, ..., nis the index of the th object in the modeled subject; v is the number of 
successive rotations of the object. 


The kinematic equations of rotation are assigned in Rodrig-Hamilton parameters, i.e., in 
quaternion form 


Ai(kT) =— Ai (KT)* 0 (K7), 


where w, is the relative angular velocity vector of object 7. 


4. Extraction from memory of information on the synthesized subject and computation of 
the new coordinates of points for the visualization object. 


Conversion of the position of each imaging point is performed as the operation of 
quaternion multiplication of vector R, j to the left and right by the quaternion (direct and 
coupled with A ,) at each of the fixed moments in time of the visual situation modeling interval: 


Ry (AT) =A, (AT) © Ry, (RT) © A; (AT), 
where R, ; is the initial position of a certain vector from the set defining the visualization 


object in simulation interval k; R’ ji8 its final position in this interval; j=1, 2, 3, ..., mis the 
index of point j, defining the visualization object. 
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5. Exclusion of all point, line or plane elements of objects which are either outside the 
field of observation, or are hidden by other elements of the same object located closer to the 
observer, or by other objects closer to the observer. 


6. Computation of the coordinates of two-dimensional perspective images by the method 
of plex mapping of points in the array of the synthesised subject on the mapping 
plane’. 


7. Reproduction of the s of the resulting image, i.e., the model of the subject, on the 
graphic display screen as described in‘. 


Purpose and usage conditions of the software package. The package which has been 
developed is designed to perform quaternion digital synthesis of dynamic subjects in an 
automated information system with sequential tion of visualization surfaces. 


The package is a set of program modules organized into a single system, based on 
structuring of quaternion digital image synthesis thms. Individual modules can be used to 
assemble programs corresponding to various met of performing this class of tasks. 


The programs in the package can — two-dimensional perspective of a visual 
space on a graphic display screen, and can also determine the coordinates of lines of sight, 


quaternion-operators of rotation transforms and instantaneous axes of rotation of the objects 
synthesized at any moment in time in the modeling interval. 


The programs of the package were written in FORTRAN-IV, PL/1 and assembler. 


The packages intended for use on the YeS computers with at least 512 Kbytes of memory 
under OS YeS. The package requires two YeS5061 disk drives, a type YeS7033 printer and 
YeS7064 graphic display, plus a YeS7052 plotter. 


Structure of the package, input and output data. A general a eS object 
digital synthesis package is shown in the figure. The software modules of the package meet all 
the requirements for visualisation system software, including modularity and expandability. 


Program module B20BR, in PL/1, analyses the initial data arrays loaded into computer 
memory, counts the points of the arrays which define the initial positions »f the object 
synthesized, and arranges the arrays in tables in A4-format pages. 


Software module B30CR, in PL/1, counts the data in each memory page and prints the 
arrays of points of the synthesized subjects generated by the previous module. 


Software module B20AR for digital quaternion imag: synthesis performs stages 3-6 in 
accordance with the above equations, and is written in assembler. 


Creation of a display file and ‘ts output to the graphic display screen are performed by 
modules written in assembler. 


Three catalog sessions are used in the package for digital synthesis of dynamic objects: 
B20TST, which converts the initial data arrays; B20LST, which outputs the transformed data 
arrays to the printer; B20GEN, which starts the computation package. 
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Key: 1, Transform of initial data array (catalog session B20TST); 2, 
analysis of data array input to computer memory (B20BR); 3, print 
out of transformed data array (catalog session B20LST); 4, print out 
of transformed data array (B20CR); 5, transformed array; 6, starting 
of software package computation (catalog session B20GEN); 7, 
synthesis of dynamic information fields (B20AR); 8, creation of display 
file; 9, coordinates of imaged points; 10, output of display file to 
screen; 11, tables of transformed data arrays. 


The input data of the quaternion digital synthesis task include: 

— The number of visualized objects; | 

— the common modeling time interval; 

— the position of the operator-observer (direction of the line of sight) during the modeling 
interval — a quaternion function determining the relationship between the screen and the 
inertial system of coordinates, as well as the distance from the quaternion plane coinciding with 
the focal plane of the optical instrument used by the observer to the coordinate origin of the 
inertial coordinate system; 


— the dimensionality of the arrays of points defining the synthesized objects of the 
modeled subject; 


— the point arrays assigning the positions of objects before the beginning of modeling; 


— other parameters included in the package but not requiring definition (if they are not 
assigned, standard values will be used). 
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The initial data on the objects synthesized have a three dimensional structure and are 
assigned by listing the coordinates of points on lines (sectors) or phases (polyhedrons). 


As a result of solution of the problem, a two-dimensional subject image is generated on 
the graphic display screen. The listing generated by the plotter contains information on the 
—2— of the instantaneous axes of rotation of the object visualized, values of components of 
the rotation quaternion transforms, distances from points describing the objects synthesized to 
the quaternion plane, as well as the coordinates of vectors defining the spatial position of 
objects in the subject at any moment in time during the modeled interval. 


Conclusions. The software package suggested for quaternion digital image synthesis of 
dynamic objects requires 1.5-2 times less computer memory than the matrix method, while the 
computer central processor time required to process quaternion digital synthesis software 
modules is 40-60% less than that required for vector-matrix software modules. 


The software package performs the task of digital synthesis of a dynamic visual space in 
simplified form, since only rotary motion of the modeled objects is represented (for example 
when the operator works in compensation mode). 


One essential qualitative advantage of quaternion algebra as used in the software package 
is the ability to represent two physical quantities describing the planar rotation of an image in 
the quaternion plane in a single form, adequate to the spatial rotation of the imitated object: 
The reiative a velocity vector (local motion characteristic) and the final rotation vector 
(characteristic of object position). 
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[Text] Successful development of scientific and technical requires that its effects be 
monitored. This is particularly necessary in terms of the of scientific progress on the 
environment and public health in areas with intensive economic activity. The solution of this 
problem requires the development of a set of “industry-environment-man” models, providing 
the greatest possible reliability of evaluations with the minimum number of initial parameters, 
and also permitting prediction of the developnent of an entire region. 


Development of such a system of models and conduct of monitoring on its basis are 
possible only where an automated environmental quality and public health monitoring system is 
used. Such a system should not only analyze the extremely complex interactions the 

(industrial) environment and health within the framework of the region involved, 
but also must allow odic adjustment of models to reflect the dynamics of the objects 
involved and the specific conditions encountered in different regions. 


In the opinion of the authors of'**, the structure of such a system for moni the status 
of the environment and public health must include the following main ts: A database, 
statistical analysis software package, and a bank of models. The system should function in two 
modes: Experimenta! and production. 


In experimental mode, the major modules of the system would interact as follows: A 
group of investigators performs statistical analysis of the information in the database to develop 
a model of the interaction of the environment and the health of the individual and the entire 
op pe he region. The models, described as algorithms, are coded and placed in the 

of m : 


In production mode, models would have direct access to the information in the database. 
The results of modeling could also be stored in the database. In production mode, the status of 
the environment and public health in the selected region ar monitored in real time. 


Some experience has now been gained in the operation of a system for monitoring the 
status of the environment and public health in the experimental mode in the area of preventive 
screening of the population. A system has been introduced and is in successful use in a number 
of medical-biological organizations. The system runs on the type YeS computers (under OS 
YeS 4.1 or later), requiring 160K of memory. The software can be used in either batch or 
dialogue mode. 


The database. The database refers to the system of software, — organizational and 
hardware devices intended for a centralized storage and shared use of data. 


The database in question, on massive preventive screening of the population, functions 
under the control of the OKA DBMS. The specific goals and requirements placed on the 
subject area database prevented the use of software environment of this system, which is 
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unsuitable for the nonprogrammer-user — ye research physician). A task-oriented 
software package for massive preventive the population ( MASOB) was 
therefore developed, supporting the following main Sie 


— Creation and management of the preventive screening database, meeting the current 
requirements of consistency, reduced redundancy and independence of data from application 


programs; 


— retrieval of data based on any conditions generated by nonprogrammer-users, using a 
simple query language or menu system; 


— generation of medical reporting documents, plus elementary statistical data processing; 


— performance of research (including statistical) tasks by joint utilization of the MASOB 
and statistical data processing (OAD per be 


The MASOB software package supports interaction of users, as well as the database 
administrator, with the database system, including the main preventive screening database and 
a supplementary recoded database. Both of these databases have a three-level hierarchical logic 
structure. 


At the present time, the main database contains data on the following types of segments: 
Patients identification data (segment name — PAT); general information on the examination 
(INSP); data on patients employment (W); case history (A); social history (CA); biorhythm 
characteristics (BR); anthropometry (AT); biochemistry (BC); immunologic status (IM); Pascoe 
of examination of cardiovascular system — data from electro-, ballisto-, seism 
arterial pressure and heart rate before and after exercise, etc. (H); results of machine — 
of heart rhythm (M) information on illnesses (IL). 


The recoding database acts as a dictionary, supporting interpretation of coded values of 
parameters and definition of field format characteristics. 


Initial information can be input to the database in both batch and dialogue modes. When 
data are input in batch mode, a specialized input form or “health status evaluation card” is 
used. The card is filled out by the physician during the examination, then converted to 
machine-readable form and input to the database. 


The architecture of the MASOB software package is shown in the figure. All programs in 
the package are arbitrarily divided into two groups: Programs for creation and management of 
the database, primarily used by the database administrator, and user information service 


programs. 
The database creation and management programs include: 


LOAD — program to load the main database from the health status cards; 
LOADBT — program to load the reccding database (using special blanks); 


PROSM — program to examine the loaded database. Operation of this program generates 
a print out of sequence of database records; 
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CORRTV — program to edit database records, allowing insertion, removal and 
modification of records in “man (database administrator) — machine” dialogue mode. Before 
editing the database, a search must be conducted using assigned keys. A user (the database 

rator) who knows the keys can immediately find the desired record and edit it. If the 
keys are not precisely known, they can be refined in the database examination mode. The 
database administrator assigns the maximum and minimum values of the keys, thus defining a 
search range. Finding a record with the desired values of the keys, the administrator then 
switches from examination to edit mode; 


CORR — program to edit database records in batch mode. 


Data Base Applications Prograrrs for Examinations of Population 
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The following user information servicing programs have been written: 


REQ1 — program to generate the machine output form for the “health status evaluation 
card.” Two cases are possible: Patient’s card printed entirely or only the segment indicated in 
the request are printed; 


REQ2 — batch-mode query program. The program supports retrieval of data based on 
any conditions specified in the query. The program provides for simple search result processing: 
Determination of mean value of characteristics, minimum or maximum. When more complex 
statistical processing is desired, the program can output the data retrieved as a special file. 
The statistical data processing program can then access the output file and perform the desired 
statistical processing of the data. 


A relational-type language is used to write queries for data retrieval (processing), intended 
for use by nonprogrammer users. For example, the query “for female workers over 40 years of 
age, less than 165 cm in height and over 80 kg in weight, determine the mean heart rate after 
exercise” would be written in this language as follows 
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PAT (P4=2) 

INSP (19>40) 

AT (AT1<165.0*AT2>80.0) 
AVE (H29) 


ae Seotiae to Snes 0. taaw Dp Sugeens Se We we fo seeds leek Sees 
queries to be formalized and decreasing the probability of error, and permitting conversion 
queries to machine-readable form from the blank. 


One shortcoming of batch-mode operation is the need to access supplementary tables 
describing the names and formats of the fields, and the requirement that the user know the 
values of the coded parameters. This causes some inconvenience for users with little experience 
using the system. To eliminate this shortcoming, the MEDIS program for generation and 
execution of user queries in dialogue mode is provided. 


During the course of a dialogue, a user can learn the composition of the data contained in 


the database, compose a request for data retrieval (processing) in menu mode, inspect the 
request generated if desired as well as the results of its execution, and store them for printing. 


We present below an example of a dialogue with the MEDIS program. 
Frame 1: 


Select the group of characteristics to be used for the search: 
01 — general patient information 
02 — general information on examination 
03 — anthropometry 
04 — case history 
05 — biorhythm characteristics 
06 — social history 
07 — employment characteristics 
08 — biochemistry 
09 — BCG and SCG data 
10 — ECG data, heart rate, blood pressure and cardiac cycle intervals 
11 — results of machine processing of heart rhythm 
12 — information on illnesses 
Selection: 01 


Frame 2: 


Select the characteristic (or press the return key): 
1 — patient card number 
2 — patient name 
3 — date of birth 
4 — sex 
5 — social position 
6 — occupation 
7 — postal index 
8 — address 
Selection: 4 
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Indicate desired operation: 
a compose search conditions including same characteristic (or characteristic of 
same p 
ae — compose search condition incl characteristic from another p 
3 — finished composing search condition, go on to position data processing 
(output) request 
4 — cancel query 
Selection: 2 


After the composition of the query request is completed, a verbal description of the query 
appears on the screen. 


Frame 5: 


As a result of the dialogue, the following query request has been composed (No. 1): 
Find information on the following patients: 


sex — female 
number of children — at least two 
For these patients, find the mean value of the characteristic “ 
Output to a file for statistical processing the values of the \. “age” and 
“number of children” ~ 


If the request has been properly composed, the user gives the program permission to 
execute the query. The results of the query will appear as follows. 


Frame 6: 


Results of execution of query (No. * 
Mean value of characteristic “age” — 42 
Composition of parameters for statistical processing: 
1. Age (80 values) 
2. Number of children (80 values) 


Statistical data processing package. execution of a query calling for 
statistical processing and data analysis, the MASOB software package retrieves and outputs 
data to a special file, after which the OAD programs access the file and perform the desired 
statistical processing. 


The OAD package is a software system which can construct and develop models of an 
object based on mathematical-statistical analysis of the information contained in the database. 
The OAD software package is based on the statistical programs of the BMD and BMDP 
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, @ number of domestic programs in various modifications, as well as programs 
developed by the authors. Based on its purpose, the package satisfies the following 
requirements: Completeness of contents, simplicity of program access, independence of use, 
modularity, allowing expansion of the package, composite (combined) nature of various 
methods, availubility of service facilities, capability for operation in dialogue mode, orientation 
toward the nonprogrammer user and ability to utilize databases. 


The OAD package is intended to perform typical and rather general tasks in 
medical-biological practice with respect to the apparatus of mathematical statistics. he 
package implements the following basic classes of programs: Screening and computation of 
basic statistics, multivariate statistical methods (factor, component, discriminant, canonical and 
other analysis), regression analysis, analysis of time series, special procedures for data 
conversion, biomedical methods, processing of consultation data. 


Access to the programs of the OAD package is standardized, allowing the use of standard 
data processing methods in the interactive mode. The job control language used by the 
package is simple. The user defines the controlling operators of a task in dialogue (or batch) 
mode, providing a description of the task parameters, selection of the analysis method and 
program operating mode. All controlling operators are divided into two groups — general and 
specific. The general operators can be used in all programs and have a standard format. The 
specific operators are used only by one specific program. 


The simple organization of the job control language allows the nonprogrammer user to 
format tasks by the use of a formalized analysis plan for his application problem. We present 
below an example of the use of the package in dialogue mode. 


Frame 7: 
Composition of parameters for statistical processing: 
1. = values 
2. Number of children (80 values) 
Please enter name of statistical analysis program — A02D 


HELP — Fl EXIT — F3 
The output parameters of the OAD package controlling operators are then defined. 


Frame 8: 
PROBLM — task definition operator A02D — scatter diagram 

Number of transgeneration cards (not over 99) 0 
Number of added variables 0 
Print covariation matrix (YES/NO) YES 
Print correlation matrix (YES/NO) YES 
Number of SELECT cards (not over 99) l 

Number of cards with conditional operators 
(not over 9) 0 
HELP — Fl EXIT — F3 
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Frame 9: 
SELECT — variable select operator A02D — scatter diagram 


Base variable index 1 

Number of cross variables (not over 10) 1 

Cross variable indices | 20000 

00000 

HELP — Fl EXIT — F3 
The results of execution of the program are printed out or placed in a database for further 
analysis by other programs of the The OAD package relieves the user of routine data 


analysis operations and requires no know! of the techniques of statistical computation. 
However, interpretation of results, selection of analysis methods and making of decisions are all 
performed by the user and depend on his experience and qualifications. 


Diagnosis program. 
a ape vig Reynard ws. pent ee. Fol ore agg goers. fates gtlages. ony 
( the level of adaptation capacity of the organism). model 

mplementing the stop light principle. A light indicates satisfactory adaptation 
ane to environmental conditions. A yellow light indicates stress on the adaptation 
mechanism. A red light indicates failure of the adaptation mechanisms. 


The additional capabilities of the program include indication of deviations in physiological 
characteristics typical of each patient, as well as determination of risk factors. 


‘The program automatically generates a primary diagnosis and assists the physician 
conducting the examination in identifying, with the aid of the machine diagnosis, three groups 
of patients: Persons whose status of health is within the normal range; persons requiring health 
improvement or preventive treatment; persons requiring further examination. Depending on the 
membership of a person in one of these patient groups, specific recommendations are generated 
for maintenance and improvement of health. 


Experience of using the system. The system has been in pilot-scale operation in a number 
of medical-biological organizations for several years. At present, the largest of the databases in 
use contains the results of examination of over 3000 patients (10Mbytes). gee Pine 
performed using the system for monitoring the environment and public health, i ive 
parameters have been selected, the structure of micropopulations analyzed, functional 
connections between te. body system parameters and sex, age, social factors and 
morbidity have been defined. results of these investigations have been used to improve the 
methods of conducting massive preventive screening examinations of the population. In spite of 
the positive evaluation of medical personnel, a number of shortcomings have been found, 
inherent in the configuration of the system presently used, particularly the database. 
include insufficient flexibility of database logical structure and dictionary (recoding database). 


In general, the experience of practical use of the MASOB database indicates the need for a 
DBMS allowing “easy” modification of the data structure, in response to changes in medical 
methods, groups of patients, purposes of massive screenings, and also indicates the need for 
active participation of medical user personnel in the definition of the composition of data, 
output forms and standard queries. Medical personnel should answer these questions in the 
process of work with system prototypes in dialogue mode. 
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The following ———— now been developed for planning databases: Determination 
of requirements for the data as a result of work by medical user personnel with a system 
prototype based on the UNISON information retrieval system‘ and industrial implementation of 
the database using the KVANT DBMS. 


The facilities used to create prototypes in the UNISON system include a relational type 
information-retrieval system with report generating facilities. The system is designed primarily 
for nonprogrammer users, has flexible database generation facilities, allows the selection of 
query statistics, editing of the dictionary, its adjustment to a convenient language. However, 
UNISON has limitation in terms of processing of complex queries and the software reliability is 
insufficient for the production version. 


Operation of a physician with the prototype models all of the basic stages in creating a 
database: Design of the logical database structure, description of tables, characteristics, 
connections between them, selection of key fields, loading of the database, construction of a 
coded value classifier, composition of typical queries, determination of report forms and 
adjustment of the dictionary. All of these stages are conducted in the course of dialogue with 
the UNISON system. A HELP system is provided for situations of uncertainty. 


During work with the prototype, statistics are kept on queries and characteristics such as 
the number of types of queries, combinations of different field types in records, field 
characteristics, selection of descriptor fields, etc. are determined. This information is used by 
the database administrator to develop the production version of the database. 


The production version of the database is implemented using the KVANT DBMS. The 
KVANT system is a special type of DBMS with inverted file structure allowing the 
construction of logical database schemas of network, hierarchical and relational type. Data- 


bases constructed in the KVANT environment are flexible, can contain large volumes of data 
and have high reliability and consistency. 


Thus, a technology has been developed for planning of databases using prototype systems. 
The details of the technology which distinguish it from traditional methods include: 
Participation in planning of the database by end users who are not programmers; 
implementation of a clearer “requester-developer” communication; planning and creation of the 
production version of the database by the database administrator based on statistics on queries 
entered during use of the prototype system. Implementation of this technology provides a high 
degree of agreement between the database developed and the demands of the end users. 
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Article by Ye. P. Anokhina, O. V. Berlyand, T. Yu. Kostyukhina, I. A. Nikishchenkov and O. 
. Petropaviovskaya] 


Text] Image processing as a means of improving visual perception and increasing the 
ee ue content of an object investigated is widely used in space research, medical 
diagnosis, industrial defectoscopy and scientific research automation. The design of an 
au.omated image processing system based on a microcomputer can, on the one , expand 
the area of application by decreasing the cost and size of such a system and, on the other hand, 
place rigid requirements on system structure and functions. A microcomputer-based automated 
image processing system is capable only of effective image enhancement, with preference given 
in selection of processing algorithms to integer arithmetic algorithms, significantly increasing 
processing speed. 

An application program package called “image” [Izobrazheniye] has been developed at 
Ulyanovsk Polytechnical Institute, intended to improve the quality of halj-tone images recorded 
as a matrix of 256x256 elements with the brightness of each element coded by a single byte. 
The package is based on dialogue control of image processing; in the development of the 
package, particular attention was given to organizing the exchange of data with peripheral 
devices and scaling of mathematical variables in order to prevent overflow of machine words. 





The “image” package requires an “Elektronika-60M” microcomputer in its minimum 
configuration (processor, 8 Kbytes RAM, 16 Kbytes ROM, alphanumeric display and “Elek- 
tronika 15 IE 256«256-015” device for display and storage of half-tone images). The display 
system consists of 1 half-tone display, three frame memory units, a buffer memory unit and a 
half-tone display controller, represented in the microcomputer channel as three registers: 
Status, for input and buffer output. The frame memory units can store and display one 
half-tone image with each element of the image coded as a single byte and two graphic images 
with each element coded as a single bit. The buffer memory unit stores a table of amplitude 
transforms of individual elements, in which the values of brightness are used as an address in a 
256x1 byte table. The processor controls the modes of display, data transfer with frame 
memory and filling of buffer memory by changing the contents of the display device status 
register. The list of main modules and functions they perform is presented in Tables 1 and 2. 


The requirement for minimization of the composition of the system and the rigid 
limitations of software size and available RAM required the use of assembler in order, on the 
one hand, to reduce program size and, on the other hand, to decrease system reaction time by 
efficient organization of the transfer of large data arrays. 


The total package size is 16 Kbytes, with 5-6 Kbytes consisting of text information. 
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For the maximum size the processing time is: Less than 1 minute to generate a 
distribution histogram; about 2 minutes for averaging filtration; 5-6 minutes for median 
filtration algorithms. 


Table 1. List of “Image” Software Package Service Programs 








Program Name Functions Performed 

History Fills out and edits patient history based on 
a fora. 

Initialisation Fills image recording device control vord 
register in "set up” mode. 

Rewrite Revrites image from recording device to 
video memory. 

Document Records alphanumeric information on object 


studied as input by operator, indicates 
case history being filled out in bottom 
quarter of display screen. 

A-graph Generates brightness cross section of image 
at horizontal section selected by operator. 














Table 2. List of “Image” Software Package Processing Programs. 








Program Name Task Functions Performed 
Scale Image scaling | Enlarges assigned image fragment to 
indicate scale. 
Histogram | Increases Converts brightness scale by method 
contrast selected by operator (linearisation 


of brightness distribution histo- 
grams; nonlinear histogram trans- 
form; stretching of assigned bright- 
ness range; equalisation of histo- 


Buffer Elements of Indicates brightness sections follow- 
cluster ing input of brightness limits by 
analysis operators. 

Filter Noise suppres- | Forms spatial filtering of images by 
sion some method (averaging filtration; 


median filtration). 
Contour Isolation of Isolates contours, suggesting bright- 
properties ness gradient distribution histogran 
for determination of thresholds. 

















The “i ee ee ea. ee processing system to be 
used as a part of a medical ultrasound computerized tomograph, for which design dev t 
had been completed. 
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[Article by S.V. Naumovich and K. P. Kondrashov] 


[Text] Introduction. Considerable attention is now being given to the problem of complete 
automation of preparation, selection of locaticn and spacing of blanks in various branches of the 
economy. The major stages in preparation of production in light industry include: Design of 
_ products, reproduction of patterns in terms of dimensions and height, planning of layout and 

and actual layout of materials. Complete automation involves automation of all of 
these stages and their interconnections. 


Specialists from the Institute of Machine Building Problems, Ukrainian Academy of 
Sciences, and the Planning and Design Office of Automation of the Textile Industry have 
developed and introduced a system for automatic planning of layout and spacing of patterns for 
knitted products" ?. 


The initial stage of information processing in this system involves coding and conversion of 
geometric information on parts participating in the planning process. Usually, special 
are used to describe the geometric information®‘. These languages allow description of 
relatively simple geometric ob using such concepts as straight-line sectors, circular arcs and 
curves ed in canonical form. Furthermore, these do not consider the 
technological specifics of the manufacturing process. 


The outlines of knitted product patterns are complex, usually containing a variety of 
curves, which can only be rather arbitrarily described using the facilities a languages for 
description of geometric information. An application software pack ~ for input and output of 
geometric information on patterns (the VVGIL package) has be aveloped for coding and 
conversion of geometric information concerning such patterns. 


Mathematical model. In order to perform geometric planning in automated mode, it is 
necessary to construct a mathematical model to represent the geometric information concerning 
knitted p-oduct patterns. 


Most universal and effective is representation of patterns as polygons, assigned by a 
sequence of point coordinates. This method allows graphic information input devices to be used 
to encode the patterns, and also provides the required accuracy, since any continuous smooth 
curve can be approximated by a broken line with any predetermined accuracy. 


An arbitrary pattern in this case can be represented as a set of points 


T={t,|(Zp ¥)}m 4, 
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with the following conditions defined in set T: 


t=t,, (1) 

tat, (2) 

L/L =®, (3) 

[tists > és (4) 
|Lrt|>eV i>jel, ..., mel. (5) 


where L =(t,,,, t,) is a line of the polygon located between points i and (i+1). 


Conditions (2), (3) eliminate polygons with intersecting edges (containing double points or 
intersecting lines). Conditions (4), (5) limit the minimum permissible distances from any point 
to any line not including the point. 


To meet the technological limitations related to the specifics of knitting production, in the 
coding process each point on the contour (point on the polygon) is assigned a characteristic 
such as f(t,,). This is necessary to isolate in set 7 the points on pattern curves which are 
subsets of design points, i.e., points used to reproduce the patterns in difforent sizes, etc. 


of pattern curves. The piecewise-linear approximation of a pattern curve 
means that pattern curves are stored in the computer and represented on graphic devices as 
broken lines, which does not correspond to the technological limitations as to smoothness of 
ee curves. Smoothing of pattern curves refers to the construction of a smooth curve from 
a broken line. 


Suppose we have the broken line 


r={r(t)} aC T, 


approximating a pattern curve. We must construct the curve S(t), passing through the points 
of the broken line 


S(t j=r(t,) 


and having a continuous first derivative at all points (including the points fixed on the broken 
line), except for the beginning and ending points: 


S'(t, @)=S' (t #). 


To solve this problem, we use the mathematical apparatus of spline functions®. We 
introduce parametrization on r(t): 


t =@, teeta ly 77 1 sey m-l. 


To construct a spline means that in each oi the sectors of the broken line we construct a 
polynomial such as 
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S(t)=At*+ B+ Ct+D, t <Kt,, 


Knowing the coefficients, A, B, C and D in each of the broken line sections, we can 
calculate a certain set of spline values at points ¢,, tp+At, t,+2At t,+3At, etc. As a result, 
when output to the graphic device, the pattern curves are represented as smooth curves. 


Reproduction of patterns in dimensions and sizes. The procedure of reproduction of 
patterns in dimensions and sizes allows us to avoid repeated coding of patterns of different 
sizes: It is sufficient to have the coordinates of the points on the pattern contour of a set of 
one size and assign a table of gradations. Computation of the coordinates of patterns of the 
required sizes is then performed automatically. 


The designer sets the reproduction rules for each part of the product. Based on these 
rules, tables of gradations are generated, containing increments Az and Ay for the design points 
to make the transition from size to size. 


Pattern reproduction is performed in two stages. At first, the coordinates of the design 
points are computed: 


a caps 
y’ ~=yrdoy, "rl, ..., 0 


where z, and y, are the coordinates of design points on the pattern for the base size, z’ , y’ , are 
the coordinates of design points on the pattern for the next size. 


To compute the coordinates of other points, an algorithm is used which is based on the 
assumption of similarity of pattern contour sectors in the base size and the required size. 
Suppose we know the coordinates of the design points ¢, ¢, t’ , t’ , as well as the coordinates 
of point ¢, in the base size. The coordinates of the point inthe required size are then calculated 
by the equations 


x, = x, + (x, — x) X cos p + (y, — y,) X Sing) x M, 
y= ¥, + ((y, — ¥,) X COS P — (x, —x,) X sing) x M, 


M=|§—¢1/1G— Gl. 
Patterns are similariv reproduced for their sizes. 
Functional purpose and structure of the package. The VVGIL package is designed for 
input, storage, conversion and display of geometric information on knitted product patterns. 
The package implements the following functions: 


— Input of information on the set of patterns in a product; 


— input of geometric information on each pattern element by means of a semiautomatic 
coding device; 


— computation of the metric characteristics of the patterns; 
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— display of model patterns on a graphic display screen; 

— editing of geometric information in interactive mode by means of a special language; 
— generation of gradation tables on the display screen or semiautomatic coding; 

— automatic reproduction of patterns in different sizes; 

— drawing of patterns on a plotter in actual size.or any assigned scale; 

— output on request of reference information on patterns and the database status. 


Each function is performed by separate modules. The modules are called and loaded by a 
monitor program using the CHAIN macroinstruction. All functional modules, after they finish 
operation, return control to the software package monitor. Data are transferred using an area 
designated in the CHAIN macroinstruction, as well as a virtual array area utilized by the 
FORTRAN language system. 


Method of operation with the package. The VVGIL package allows processing of 
information on individual patterns, sets of patterns and entire models. A set refers to a 
selection of patterns required to produce a product in a given size. The complete set of all sizes 
is referred to as a model. 


Operation with the software package is in dialogue mode. The operator selects the desired 
function from the display keyboard. The monitor up the corresponding functional module, 
which requests data on the model, set, required parts and other necessary information. The 
dialogue makes wide use of the principle of defaults and suggestions. 


Let us study the execution of functions most frequently used to process information on 
patterns: Input, display and editing of geometric information. 

The procedure to input information on product parts begins with a description of the 
modei. The operator inputs the name and article of a model, the scale of sizes, and lists the 
parts included in the set, as well as their specific details (numbers of parts, requirement for 
mirror or symmetrical duplication, etc. ). 


Coding of geometric information is performed using a graphic information coding device, 
and includes the following steps: 


— The code for a pattern and its size are indicated on the display; 
— the pattern or its drawing is attached to a plotting board; 

— the point type is indicated using the function keys; 

— a special pencil is used to read the coordinates of the points. 


Paired (such as sleeves) and repeated parts are coded once. Symmetrical parts are coded 
using half their contour. To code a rectangular part, one need only indicate its 
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dimensions: Length and width. Patterns, the length of which is greater than the operating 
field of the plotting board, can be input. 


When geometric information is output to graphic devices, pattern curves are automatically 
smoothed. The design points are marked on the curves, and pattern marks are displayed in the 
central portion (sizes, part names, etc. ). 

Editing of geometric information on patterns is performed in interactive mode. The 
results of editing are shown on the graphic display screen. The operator can rotate a part to 
any angle, change the type of contour points, change the accuracy of pattern approximation, 
move a point in any desired direction, etc. 


Conclusions. The VVGIL package runs under the RAFOS operating system on the SM 
computers. The minimum hardware configuration is: 


— Alphanumeric display; 

— type SM-5400 disk drive; 

— semiautomatic graphic information encoder (type PKGIO); 
— graphic information converter (type UPGI); 

— type AP-7251 plotter. 


VVGIL Technical Characteristics 

Time required to encode one pattern, s 30-60 
Time required to draw one pattern, min Up to 1.5 
Maximum number of parts in model 32 
Maximum aumber of points in a pattern 50 " 
Minimum length of coded line sector, mm 3 . 
Number of pattern size characteristics 3 
Number of values of each size characteristic 16 
Time required to generate gradation tables for 

one size characteristic, min 2-5 
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[Article by A. Ya. Oksenenko, Z. Ya. Lure and G. S. Levitin] 


[Text] Methods of search for a set of effective (quasioptimal) solutions occupy a particular 
position in contemporary multicriterion optimization theory’. However, recently increasing 
attention has been given to methods allowing the decision maker to conduct practical selection 
of parameters of the optimized object most closely meeting the requirements of the task at 
hand. All such methods are adaptive in nature and are usually implemented as dialogue-mode 


programs‘. 


By adaptive, we mean that such algorithms feature not only adaptation of the search 
algorithm to the system of preferences of the decision maker, but also and most importantly, 
adaptation of the decision maker to the capabilities of the object being studied and generation 
of the concept concerning the properties of the optimal solution. 


The method of multicriterion optimization suggested in’ is based on probing a portion of 
the N-dimensional space of controlled parameters determined by the equation X* <z<X** , 
t=1,N by means of LP, sequences with high distribution uniformity both throughout the entire 
space and in projections on any subspace. 


At each generated point of the sequence, satisfaction of the functional limitations is tested, 
i.e., the area of permissible values of the parameters is determined. For points satisfying all 
limitations the values of quality criteria are computed and test tables containing these values 
are generated for subsequent investigation. This method is a development of the method of 
random search and does not require the use of a complex mathematical apparatus for its 
practical implementation. The effectiveness of the method is confirmed by its successful 
application in a wide variety of technical situations‘. 


The dialogue system described is based on the use of LP, sequences to probe the parameter 
space and contains a number of functions implementing adaptive methods of optimization and 
allowing investigation of the object of optimization. A diagram of the dialogue system is shown 
in the figure. An arbitrary object of investigation should be described in the software modules, 
allowing fulfillment of the functional limitations to be verified and quality criteria to be 
calculated for the assigned controlled parameter vector. The initial data prepared by the user 
include parametric limitations, presented as the minimum and maximum permissible values of 
each parameter. In the preliminary stage of operation of the system a test table is constructed 
containing the number of points indicated by the user (a point refers to a specific parameter 
vector and the corresponding values of criteria). After construction of the test table, the 
dialogue operating mode is started, in which the command line is interpreted, the function 
requested is executed and the system awaits the next command line. 


The system performs three groups of functions. 
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Test table processing functions, designed to analyze data: 


— Determination of limiting values of the assigned criterion and indication of the number 
of the corresponding points; 


— output of values of the assigned criterion and the corresponding point numbers in the 
order of decreasing values of the criterion; 


— exclusion (temporary) from the test table of all points for which the values of the 
indicated criterion exceed the set limit (sequential input of limits for each criterion allows the 
search area to be localized or the optimal solution to be defined); 


— calculation of the correlation coefficient of an assigned pair of criteria by a selection 
indicated in the test table; 


— instruction of a projection of the distribution of values of a criterion onto the plane of 
two indicate criteria; 


— exclusion from the test table of all ineffective points (point i is considered ineffective if 
the table contains a point #i, for which ® ,¢®,,, k=I,r, where ® , is the value of the criterion 
for point j, ris the number of criteria in the multicriterion problem); 


— input of weight factors and determination in the test table of points minimizing the 
convolution 5A,6*, and the convolution maxA 42* p» Where A, are the weight coefficients, d*, 
are the normalized values of the criteria: 


Dg — ‘Dp min’ 


. 
‘ip = 
84 





M, max — O, min 


— use of this function allows not only location of the optimal solution, but also 
ormation during the dialogue of the weighted responses of the user concerning the relative 
value of the quality criteria); 


— input of the desired values of criteria and search in the test table for points having the 
minimum euclidean distance from the set point in the space of the criteria; 


— output of the entire test table or the portion of the table remaining after exclusion of 
points; 


— output of values of criteria and/or parameters of a indicated point; 
— clearing of criteria limitations and restoration of the test table. 


Since these functions operate on data coatained in the created test table, minimum 
reaction time to user requests is provided, practica!ly eliminating unproductive waiting time. 


Direct model investigation functions are designed for graphic representation of equations 
and make use of the task-oriented program modules. The system constructs graphs 
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Key: 1, Task-independent portion of software; 2, start; 3, input 
number of parameters and criteria, parameter limitations; 4, create test 
table; 5, generate LP, — 6, input and interpret command lines; 
7, command line empty?; 8, yes; 9, no; 10, end; 11, new test table 

. supplementary functions; 13, test table —s 
functions; 14, direct model inves —R functions; 15, modification 
parameter limitations: 16, task-dependent portion of software; 17, 
module to compute functional criteria; 18, module to check fulfillment 
of functional limitations. 


The supplementary functions include: Input of arbitrary values of parameters or change 
value of one parameter at an indicated point with subsequent testing of execution at a newly 
generated point of the conditions of functional limitations and computation of 
criterion-functions; writing of the test table and other necessary information in long-term 


table e (during subsequent work sessions with the model, it is not necessary to recreate the test 
table). 


The parameter space probing density can be increased without limit by implementing the * 
procedure which generates a sequence in the vicinity of any indicated point. The area of 
change of each parameter is reduced by a factor of 10. 
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Successive application of this function can decrease the area of investigation without limit. 


All information in the course of a dialogue can be output to a video terminal or printer in 
order to document the process of search for the optimal decision. 


Utilization of the system has shown that one or two half-hour sessions are sufficient for a 
user to learn the instructions of the input language and operating principles. This is because of 
the simplicity and convenience of the instructions in the input language. For example, to 
calculate the correlation factor between the values of two criteria, the input instruction is R i 
where i and j are the numbers of the corresponding criteria; the values of parameters (criteria 
corresponding to point i is executed in response to the instruction TIP (TIK), etc. 


It has been found effective to use the system in the stage of developing mathematical 
models for their preliminary investigation and refinement. In particular, the capabilities of the 
system to represent information in tabular and graphic form familiar to planning specialists 
has allowed them to evaluate the adequacy of models and indicate paths for their modification. 
Over a half year of operation of the system at the Scientific-Production Association of the 
National Scientific Research Institute for Design of Hydraulic Drives, various models of a 
radial-piston hydraulic pump with distributing valves, the control system for braking a 
high-speed positioning mechanism and an electronic control module for the electromagnets of 
hydraulic apparatus have been investigated and optimized. 


The system was developed for SM-4 and SM-1420 computers and can run under OS RV ox 
RAFOS. The system is implemented and models are described in FORTRAN-IV. 
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[Text] The present reform in economic management touches all aspects of the production 
activity of an enterprise. Planning of standards has a decisive role to play. 


Standards allow scientific determination of necessary costs, based on which the prices of 
products must be determined. Improvement of standards generation at an enterprise is among 
the most important areas for resource conservation in our country. 


Particular attention should be given to labor-consumption standards. The labor consumed 
in making a product is one of the most important characteristics, reflecting a great variety of 
technical, economic and organizational conditions under which the product is produced. 
Broader utilization of labor consumption in planning practice and evaluation of the activity of 
labor teams, the increasing knowledge. of labor consumption as a factor in the growth of 
productivity of labor, require improvement of the method of planning and managing this 
characteristic. 


The problem of labor consumption standards in the manufacture of a product is 
particularly acute for the solution of optimization problems with respect to generation of the 
production program of an enterprise. The location of internal reserves and maximum 
utilization of these reserves as resources remains outside the limits of the problem related to the 
effect of utilization of reserves, related to the objective prerequisites for changing of the actual 
labor consumption standards (d i): Since the problem is solved long before a plan period 
(March, June, November) begins, the input information used is the labor consumption standard 
currently in effect. 


The problem of decreasing the standard is in practice solved by assigning labor reduction 
factors for an entire shop*. The values of these factors usually vary within limits of 5-12 
percent, whereas changes in labor consumption standards for products fall within the range of 
2-30 percent. 


Therefore, differentiation of standards for products within the limits of a single shop is a 
necessary condition for improvement of the economic management mechanism and for 
conversion of shops to independent financing. 


Analysis of the factors which determine labor consumption has shown that one means of 
improving standards is to formalize their definition by the application of statistical methods 
and modern computer equipment. However, the use of statistical methods in the economics of 
an enterprise involves a number of difficulties. An important condition for the application of 
these methods is the availability of a uniform statistical set. In this case, we have in mind the 
relative, conditional uniformity of the set, meaning that the equations derived are correct for 
each unit of the set. It is usually considered that the number of observations should be 4-5 
times greater than the number of factors analyzed. 
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The production program of an enterprise, which is the object of investigation in this case, 
is an extremely nonuniform set. This is most noticeable in enterprises with short-series and 
individual types of production, where products produced are common only in terms of resources 
utilized, whereas the structure of these resources used with each product is different. 
Furthermore, the short “life” of a product (5-7 years) creates additional difficulties in 
generation of a sufficient number of observations. The problem of sufficiency of observations in 
this case can be solved by generating uniform products in a group which is periodically 
manufactured. 


Determination of the sufficient number of observations can be undertaken in two stages. 
In the first stage, all products must be divided into groups in accordance with their functional 
purpose. This problem is solved in practice by creating functional groups based on professional 
analysis or the use of the “Industry Product Classifier By Areas Of Technology.” 


In the second stage, the set of products with the same functional purpose is divided into 
groups depending on design, technological and economic parameters. The problem arises at this 
point of determining an efficient number of characteristics to form the operating space of the 
classification. It can be solved by methods of expert estimation, multivariate classification, 
group accounting of arguments, etc. Their use in the stage of isolation of essential factors 
determining labor consumption, as in determination of the degree of influence of some 
parameter on the labor consumption of a product, has been studied in detail in‘. 


The use of expert estimates should be accompanied by a computation of the degree of 
agreement of various opinions based on the concordation factor and the spearman 
rank-correlation factor. 


The use of expert estimates for each of the factors selected within a functional group 
results in computation of a variation factor. The variation factors of most groups have been 
found unsatisfactory. The need has therefore arisen for a multistage classification scheme in 
which the next stage would consist of subdividing the functional groups based on a set of 
characteristics, none of which is a necessary or sufficient condition for membership in the group. 


One of the methods of multivariate classification, cluster analysis, was selected for this 
specific implementation. The similarity measure used was the euclidean distance. Analysis was 
performed on one of the functional groups, including 50 products of a single technological area 
analyzed on the basis of seven eae Each product was interpreted as a point in 
seven-dimensional space. After 49 iterations, 13 homogeneous groups were formed, for only 9 of 
which the basic statistical characteristics were found to be satisfactory (dispersion, mean-square 
deviation, variation factor). However, since some of the products were not included in any of 
the groups and there was a class of anomalous observations, the groups formed were small 
(three to five products) and ineffective for construction of multifactor regression models to 
— labor consumption. Suggestion for the use of the results obtained are presented in 

etail in’. 


The use of the method of group accounting for arguments, based on the theory of self 
organization, was attractive due to the absence of rigid limitations as to sample size. However, 
it was found in the process of implementation that effective use of this method requires rather 
long dynamic series. Thus, formation of a teaching sample in five years, a testing sample of for 
the sixth year and a monitoring sample for the seventh year of manufacture of a product 
= satisfactory results. However, there were only three such objects among the 50 products 

ected. 
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The resus obtained led us to the conclusion that prediction of labor consumption 
standards within a single enterprise is not expedient, since representativeness of the information 
used is quite arbitrary. This is because products of a single functional purpose are 
manufactured at several enterprises in the industry and, thercfore, determination of the 
variation in labor consumption with various factors can be achieved only by analyzing all 
products of the same functional purpose. The development of industry-wide materials on this 
problem has allowed the work to be continued. Based on our analysis of industry developments 
and in accordance with todays requirements for improvement of independent financing within a 
plant under the conditions of self management and self financing, the task was set forth of 
creating a dialogue system for the generation of labor consumption standards (called 
DISFONT). 


The guiding principles upon which the creation of the system was based are: 


— Assurance of stability of standards over a long period, requiring prediction not only for 
the planned year, but also for a longer term (2-3 years); 


— assurance of conditions necessary for improvement of self financing in shops; 


— increased responsibility of workers, for which purpose the assignment as to reduced 
labor consumption is made at the level of the corresponding subdivisions; 


— increased reliability of standards by maximum accounting for nonformalized factors 
which influence the specific operation of production facilities, for which purpose the algorithm 
includes a dialogue procedures for correction of calculated values of the standards; 

— minimization of waiting time by decision makers; 

— assurance of standard development by using industry materials to determine the 
variation in labor consumption with various factors in accordance with the functional specifics 
of the various products. 

The methodological aspects of the dialogue system were developed utilizing: 

— The industry product classifier; 

— the industry standard for evaluating technical and organiza‘ional levels; 

— the industry method for computing supervisors labor; 


— the results of statistical processing of analysis for causes of changes in labor 
consumption over a number of years (at the S. P. Korolev Plant); 


— identification of reasons for changes in labor consumption among subdivisions at an 
enterprise. 


The software contained in DISFONT consists of 18 programs, divided into two sets in 
terms of functional purpose: 


— Calculation of technological labor consumption standards; 
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— calculation of full lebor consumption standards (figure). 


The set of calculations involved in the technological labor consumption standards consists 
of three modules: The first determines the standards for labor consum per unit of product, 
the second calculates the volume of product in standard hours, third generates labor 





The basic factors considered in determining cal labor consumption included: a 
— the year of manufacture of a product, ) — the c share of technically well founded 
standards, Tg — he level ob techadiagiedl Ceuigdnent of the poeta, d — the technical level of 


the facility. 
The following calculations are performed to obtain the required information: 


— The specific share of technically well founded standards (TOH) in the total volume of 
labor consumption 





on + . 100, 


is the labor consumption of the uct for the various shops in standard hours as of 
| frovedber of ie peneea 200 the base); T ie the labor consumption of the product with 


respect to technically well standards; 
— the level of technological equipment: 
Il 


— 


where I, i ——————aLe<«°m6cmCC is the number 
of parts and assembly units in the shop per product 


— the technical level of production of the product in each shop (d) is calculated in 
arbitrary units, using the industry-standard methods. 


Then the values of factors b, z an‘) din the industry tables are used to determine the 


calculated labor consumption factor ( S potest (a) Nobel rum Kaen tot 
depending on the year of manufacture ‘the product (a). If a is 3-7 years, K_=0.8; if 


K,=0.7. 
The calculated labor consumption (T,,) is determined by the following equation: 


Tp = Tol! —Ka(! — Ky)]. 
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3, c share of TOH; 4, technological equipment level; 5, technical 
level: 6, year of manufacture; 7, — peg ge BOR ove 
ewcvicing factor; 9, increase in volume of production; 10, specific share 

—8 of supplementary workers; 11, specific share of supplementary 
workers among production workers; 12, specific share of new products; 

13, actual management factor; 14, degree of achievement of standards: 

15, calculation of technological labor ion; 16, correction of 










dialogue mode (second decision RL 19, technological labor 
consumption ; 20, servicing labor consumption standards; 21, 
t labor consumption standard; 22 product full labor 


Automatic mode is implemented 


used 
consists of one or more economic characteristics (profit, material stimulus fund, cost, wage 
fund, etc.). Maximisation (minimisation) of these characteristics can result in 
of bottlenecks for certain products in terms of utilization of labor resources or 
— Pure ORT recsives infoemation with 0 Het of peoducts tor which the stendands dhesid 
revised. epee — growth rate of production volume and productivity 
characteristics of labor over a five year period may reveal information on products, the labor 
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of which needs to be revised. The person who can make the decision to change 
the calculated labor consumption standards is the chief of the Labor and Wages Department or 


his deputy. 


The interaction of the user with the system is in dialogue mode in an input message 
which is a set of directives. To do this, table 1 is shown on the screen, 
the product number, all shops in which the product is manufactured, the basic values 

of factors determining labor consumption, the best values of the same factors achieved in the 

industry (for K,=1), the labor consumption, basic and calculated, the year when the computed 

—540 on is achieved. The user (decision maker 1) can perform the following actions 
system. 


1. Without performing computations, go over to any shop in which the product is 
manufactured. If all shops have been examined, the instruction is given to go on to the next 


product. 


2. Without performing computations, switch to another product, with subsequent similar 
actions. 


3. Decision maker 1 can edit the calculated labor consumption in two modes: Factor 
and results modes. Operating in factor mode, the user analyzes the values of the basic and best 
factors achieved at other enterprises for products of the same functional purpose and factors 
calculated in a specific shop, and can change the calculated values of one or more factors. The 


labor consumption, enters it in 
values of the factors (levels of technological equipment, technical level, specific share of TOH) 


4. If the user does not accept the results obtained, he can enter an instruction causing 



























































the corresponding row of the table to drop downward. Four such shifts will a table on 
the screen consisting of five versions of formation of the various directed consumption 
values. If the desired version is still not seen, the instruction to call up the product is repeated 
and the search is continued. 
Table 1. Generation of Labor Consumption Standards In 
Dialogue Mode (First Decision Maker) 
Preduct| Shop Values of Characteristics 
Number ° 
Tec*nical Level | Level of Techno- | Specific Share Labor Consumption 
logical Bquipment| of TOH (Standard Hours) Year 
Basic|Calc |Direct|Basic|Calc |Direct|Basic|/Calc [Direct | Basic] Calc |Direct|Calc |Direct 
156 1 |0.490/0.406; I | 1.4) 4 i 60 | 85 I 460.0, 422.0) I i 3 
156 S$ |0.380/0.510} xX | 1.68) 4.8) I 48 | 85 I 59.6) 42.4] I i 2 
156 8 |0.240/0.200}; x | 6.72) 5& I 74 | 90 1 878.2; 860.0) I 1 3 
—* 0.540) X | 1.62) 4.8) X | 54| 85] X a«4600. o) 4040.0.1 1 | 3 
Total :0.510/0. ‘ . , . 
Note: I shows mt —— determined by dialogue method. 
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Table 2. Determination of Standard Specific 
Numbers of Workers In Dialogue Mode (Second Decision Maker) 

















Standard and Actual Share of Achievement of 
Specific Shares (7) Supp] Standard (7) 
Shops Vorkers 
ENG | Serv | Gr.serv | Guard | Suppl | Per TOH | ENG | Serv | Gr.serv | Guard | Suppl 
Baterprise | 15.0) 3.0 3.0 1.0 37.0 46.5 |120.0) 166.6) 7.07 | 100.0 | 113.5 
18.0} 5.0 2.0 1.0 42.0 
Shop No. 1 |:XX.3| :XX.%) :XX.2 :XX.2 | :XX.2 IX.X |XX.00) XX.3) IL.I 1.5 | L.I 
U.I U3) .t U. L. 
Shop No. 2 | V.I .iJ :XX.X a. | :XX.2 IX.3 | 1.3) OT) L.I IX.5} XX. 
U.I U.I 1 U.I XX. 





























NOTE: Values with ":" on left can be changed by decision maker 

















5. Computation of the directed labor consumption by years of manufacture can be 
performed in automatic or dialogue mode. The first decision maker can assign the decrease in 
labor consumption by years in standard hours or percent. The absolute values of labor 
consumption are determined automatically and are shown on the display screen. 


The iterative mode of producing the directed labor consumption is continued until the first 
decision maker is satisfied by the results of the solution. If the user is satisfied with the results 
ee ee The contents of the screen can also 

out. 


For 
The necessary information for computations in the third module includes prediction of the 
reasons for decreased labor consumption and identification of factors for specific subdivisions of 
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paca i 9 ee 
for of operations 
reason for the change’. Analysis of this 
led to the following conclusions: 


— There is a correlation between the corresponding labor consumption change factors and 
the years of production of products; 


— the structure of the decrease in labor consumption for products in the same year of 
manufacture differs for different functional groups; 


— there is a rather rigid identification among labor consumption decrease factors among 
the structural subdivisions of ea enterprise. 






group of products 


subsequent planned 





T’ = T’ 4.9 °(1-H,); 
} ee is the actual labor consumption involved in servicing of a unit of products; H, is 


the for decreased service labor consumption. In turn 
T’ + of > 
0g=* oe 
where T’, is the technological labor consumption of a unit of uct (the base); T, is the 
cal labor consumption of the program ( base); T,4 is the actual 


servicing labor consumption. 








Computation of standards for decreases in servicing labor consumption (H,) is 
as a function of the following factors: The increase in product volume (AB), specific share of 
supplementary workers in the number of industrial-production workers — N,, specific share of 
supplementary workers working according to TOH, N,,,,. According to the functional purpose 
of a product and the absolute values of the factors, the branch tables, interpolated as necessary) 
are used to determine the approximate value of the standard for decreasing labor consumption 


Hr,). The final value of the standard decrease in labor consumption includes a correction of 
, considering the degree of achievement of the standard level of the number of supplementary 
workers (JI,) and AB). 


The value of J. is determined in a dialogue procedure, essentially consisting of correction 
of the standards for the specific share of servicing and management workers by shops, computed 
by the industry-standard method as the zero approximation. The values of standards in the 
gero approximation are compsred by the decision maker with the actual values at the moment 
of computation and the corresponding changes are entered through the display to produce 
acceptable values, based on the specifics of operation of the shops in question (Table 2). 


The absolute values of |, and AB are used to determine K, in the industry tables. Final 
determination of the standards for reduction is performed by the equation 


H,=Hi-K,. 


The information obtained is used to determine the standard for servicing a unit of product 
and the entire production program, and is also the basis for computation of management labor 
consumption standards. 


The standards for management labor consumption are computed by the same method as 
servicing labor consumption standards. An exception is the algorithm for determination of the 
actual management labor consumption of a unit of product: 





as well as the list of factors indicating the influence on the standard for decreased management 
labor consumption of n, AB, N., Nyp where N, is the specific share of production of new 
products in the production program (per labor consumption); N_, is the specific share of 


management personnel in category / in the industrial-production nnel. 


The result of the computation is the generation of information on the total labor 
consumption of a unit of product the production program by shops and for the entire enterprise, 
printed out in four formats. The main users of the results of computation are the Department 
of Technical Preparation of Production, the Department of Labor and Wages, the P 
Department, the chief economist, and the various shops of the enterprise. e frequency 
performance of this task is at least three times per year (during generation of plans in March, 
June and November), and also when necessary (in case of significant changes to the 
production-economic activity of the enterprise). 
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The DISFONT system requires a YeS series —* computer, a type YeS7066 or 7927-01 
alphanumeric display, a tape drive, printer, and at least 25 cylinders of type 5061 disk storage. 


The were written in PL and assembler. The programs run under OS Ye, 
version 4.1 or later (MFT ot MV). 


The DISFONT system is standard for enterprises under the Ministry of Communications 
equipment. The economic effect from its introduction at one enterprise is about 400,000 rubies. 
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{txt}[Text] Problems of preventing and eliminating fires in objects are quite 
pressing and require the development of powerful, ble, economi effective systems and 
fire protection equipment, as well as optimal strategies for their application. 


Such developments require large numbers of experimental studies in specially equipped test 
areas (adits, training shafts, etc.). 


The existing experimental base cannot fully provide the required volume of field testing, 
recreate the picture of the entire shaft, consider the specifics of technological processes, or 


reproduce the entire variety of possible scenarios of the development of fires and extinguishing 
processes. 


Furthermore, fied requires cant expenditure of time and material resources 
for preparation and conduct of tests, which are and may have unpredictable results. 


Therefcre, field testing of existing and suggested fire protection systems and t is 
ievteanity hot Geiieahle ct dangly inpesiiida. rs scaca dial 


One of the most effective approaches to expand the capabilities of experimental studies of 
aoe systems and equipment is the use of computer equipment and software 
simulation’. 


The following trends have been developed in recent years in domestic computer simulation 
practice: 


— Creation of uuiversal simulation systems’, 
— development of systems for simulation of formalized objects® °. 
— development of task-oriented simulation systems“ ”: °. 
M. ——— of Cittaneion, —— —* — ean ie 


“Respirator” National Scientific-Production Association, is a task-oriented simulation system 
based on universal simulation systems. 


The system is desi to perform experiments simulating the processes of development, 
dtaction tad extinguishing of fe in order to wlact optimal es to protect mines from 
exogenous fires (arising 


due to the external causes), considering cost of fire protection 
versions studied. 
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practical interest. 


SIMPO development methods and technology. Development of task-oriented simulation 
systems begins with three interrelated tasks: 


— Classification of the concepts, objects, systems and typical problems from the subject 
area in question based on a detailed analysis (and possibly studies) of the specifics of the 
subject area, as well as its most pressing problem areas; 


— selection (or development) of the conceptual-methodologic basis of the system (the set 
of basic = plans, methods and principles for representation of data and processes in the 
subject area); 


— selection of a basic programming system. 


The conceptual basis of SIMPO was selected in the preplanning research stage, 52 

the following concepts: Shaft, block, working, branch, station, supervisor, extraction face 

shift, technological equipment, technological equipment classifier, mine and automatic fire 

protection equipment, fire — equipment eating betes. graph, combustion wre 
system, extinguis group, complicating rs, cost parameter 

Seo 0 itt coaneal effectiveness of fire protection, modeling section, siipaber digits experiment, 

etc. 


The following typical tasks were also distinguished: Determination of basic and nonbasic 
fire protection version functional effectiveness characteristics, distribution of fire protection 
resources within a mine or region, estimation of prospective fire protection systems and 
equipment (under development), etc. 


The NEDIS system’ was selected as the basic programming system. The concept of the 
continuous-discrete system which it contains allows convenience representation of the processes 















of occurrence, development and extinguishing of fires, as well as the corresponding data 
structures. This provides a single conceptual basis of description of the subject area and a 
standard modeling mechanism. 


The capabilities of the NEDIS system allow conversion of programming facilities in the 
subject area (data sets, methods, models, etc.) to standard linguistic elements which can be 
understood by many users. 


The methods and approaches of structured programming’ were widely used in the 
development of SIMPO. 


The system development process involved all the traditional stages of creation of modern 
software systems”. 


In the requirements analysis stage, the following problems were addressed: 
— Determination of the set of tasks to be performed by the system; 
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— estimation of the completeness and variety of machine experiments in comparison to 
experiments in test areas; 


— a priori estimation of the cost of the machine experiments, since generation of modeling 
results with the desired level of reliability requires large numbers of computer experiments; 


— interaction of users with the system. 
In the s of determination of specifications, the problems addressed included the 
functional ties of the system, the equipment to be used for machine experiments, the 


structures and formats of input and output data, types of memory resources used to store the 
data, and methods to be used to evaluate output variables. The method of data representation 
and processes to be selected from the subject area were basically determined in this stage. 


In this case, representation of combustion processes and the conduct of economic 
calculations required software implementation of formal mathematical models developed at 
“Respirator” National Scientific-Production Association"'. 


In order to describe all subsystems in a mine and all fire extinguishing processes, it was 
necessary to develop new simulation models. 


A mine was looked upon as a complex hierarchical structure consisting of several standard 
blocks (sectors). Each block in turn included several workings, workings consisted of branches, 
branches were divided into stations. 


To save RAM and data preparation time, the sets of attributes (parameters) of such 
subsystems as the working, branch and station were carefully formulated. Problems of tying in 
the mine-geological and mine-technical parameters, technological equipment, fire protection 
equipment and mine worker shifts to each of the mine subsystems were solved. 


Structure and format of the output data in SIMPO were determined on the basis of the 
system users’ requirements. 


The system planning stage begins with the problem of specializing the basic programming 
system. 


Adaptation of the NEDIS system to problems of estimation of the effectiveness of fire 
protection strategies, systems and equipment was based on the use of the mechanism of library 
entries and returns (library environment)’. 


The specific usage conditions of the library entries and returns are assigned in the 
description of the variable portion of the program, called the “insert.” The insert is always 
executed in the context of the corresponding library entries and returns. 


The embedding of inserts permissible in the NEDIS om on allows the composition of the 
library environment to be expanded, and permits the formation of a multilevel library 
environment structure. The higher level of the library environment is accessible to a broader 


range of users. 














The next step is determination of the structure, composition and functional purpose of the 
entire li environment, as well as its basic components. The basis of solution of this 
problem is the fact that any simulation program which can run on the computer includes three 
per ——— The model of the effect (process) being studied, the experimental system 
. various types of data (input, output, etc.). An experimental plan is interpreted as control 

an experiment. 


In , & separate plan must be developed for each computer experiment, while one 
model of an object can be used to implement a number of different experiments. It follows 
from this that experimental plans, the most frequently changed fragments of simulation 
programs, should consist of inserts executed in the context of the corresponding library entries 
as See OS sey 5 Se eS re 
The model of an object, in general, 
processes. These include the models 
of external actions: Processes of combustio 


Based on an analysis of t 


protection equipment, existing 
development and 





environment, for execution. 

The standard environment of the NEDIS system includes procedures to control a 
simulation process, generate a calendar, to order and synchronize processes occurring in 
parallel), interpretation of many NEDIS language operators with complex semantics. 

The fourth level of the library environment includes a description of all typical mine 
subsystems (blocks, workings, branches, stations, mine workers, the supervisor), technol 
equipment (conveyor belts, cables, sprinkler systems, etc.), various classifiers and cost , 
The descriptions of variables and all types of combustion processes (combustion schemes) are 
placed in this third level. The second level includes a description of complicating factors, 
variables and scenarios for extinguishing of fires. 


As we have noted, control of the simulation process is executed in accordance with the 
experimental plan selected in each session. Each modeling session includes a series of 


A modeling session consists of the following stages: 

— Input of modeling session initial data; 

— generation of the object to be studied (experimental area); 

— initialization of the modeling process (generation of external actions); 
— running of simulation program and measurement of output data; 


— completion of the run; 
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— processing of results from the run; 











— completion of the experiment; 
— processing and output of results from the experiment; 
— preparation for the next experiment; 
— completion of modeling session. 
- / 
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Key: 1, NEDIS system driver program; 2, experimental plan; 3 
modeling session initial data input; 4, studied object generator; 5 
external action generator; 6, run of simulation on program, measurement 
of responses; 7, completion of run; 8, processing of run results; 9, 
ee eee processing and output of 
results; 11, preparation for next experiment; 12, completion of modeling 
session; 13, basic mine subsystem generators; 14, combustion system 
generator; 15, extinguishing system ee ee 16, complicating factor 
generator; 17, collection and accumulation of statistics; 18, statistical 
of modeling results; 19, documentation of output reports; 20, 
basic mine subsystem models; 21, models of combustion, extinguishing 
and complicated factors; 22, level n. 


— Eas eaiaaion tacktiee diate, | Eee seams th ee ae 
a computer simulation experiment (modeling session). The programs in these modules are 
included in the first level SIMPO library environment, while the program representing the 
experimental plan, acting as an insert in the library environment, is a chain of operators w hich 
call or start the corresponding procedures and classes. 


The completeness of a set of experiments which a SIMPO user can run depends essenti saggy 
on the fr nctional bilities of and variety of experimental plans (given the composition of the 
anaes é witeckiaait}. 





For each class of task performed in SIMPO, the corresponding experimental plans ha 
a Tas take laicpecienental flats) 

— The level of the experimental area (entire objects or certain components); 

— the composition of the experimental output variables; 

— the comnosition and location of fire protection equipment; 

— the fire development scenario; 

— the extinguishing tactics and methods; 

— the scenario of complicating factors. 


The set of experimental plans is determined by the combination (complete or partial) of 
these factors. 


Each experimental plan is invariant relative to the list and sequence of its component 
modules, but for each class of tasks these modules may differ in their functional purposes. 


Thus, the first level library environment contains a set of modules which support the 
performance of the tasks defined for SIMPO. 


Representation experimental plan as a chain of calls to the corresponding modules 

sie h ss ox Seger oy plies sa apegeed inchs geartir pepn ces Rae pth 

with this approach as experience is gained in operation with the system, a 

sch Gt Masses Me the SIMRO tach — 

_ the transition to dialogue preparation and geveration of programs of simulation 
ts. 





i & Giestordbenl thea tsanioie Maaaction 
d end in the creation of a hierarchical plan, 


poping eens sould end inte —— 
subordination. 


A diagram of the system hierarchy is shown in Figure 1. 


The multilevel structure of this system required that significant attention be given 
problems of planning the sequence of development and testing of all modules, as well 

of the input data. It should be noted that the structural organization of data 
SIMPO depends essentially on the hierarchy of the library environment and the functional 
capabilities of the experimental plans. 


Files are allocated for data (various types of tables, catalogs and numerical characteristics) 
for all four levels of the library environment. Furthermore, data files are defined to support the 


functioning of the basic experimental plan ~odules, particularly such modules as modeling 
session data input and experimental area genea.‘or modules. 





The need to determine the economic effectiveness of the fire protection versions studi sd 
required the generation of a special file to store the major characteristics (based on wodeling 
results) of the basic and other investigated fire protection versions for all mine workings. Filcs 
were defined for test example data. 


As shown in Figure 1, the hierarchy of SIMPO components includes four levels. The 
driver program of the NEDIS system, located at hierarchical level one is the kernel for all of 


the modeling programs and is not developed by the user. 


With the top-down planning technology, the sequence of development of the modules is 
generally determined by the corresponding hierarchical plan. Two approaches are most 
commo1; Hierarchical (development and testing of module layer by layer) and operational 
(development and testing of modules on vertical lines as they are called in the operating 
simulation program). 


As SIMPO was created, the need arose to depart somewhat from the top-dow) technology: 
Modules were developed from the bottom up on vertical lines, then tested from the top down 
—* vertical lines. The core of each such vertical line consisted of the experimental plan 

ules. 


This approach to planning was demanded by the specifics of the subject area. For 
example, it dces not make sense to develop and test a mine generator if there is no module 
describing it. “Stubs” were used to represent modules not yet developed. 


As the system is adapted to the performance of new tasks, it may become necessary to 
develop new experimental plans. The development of each new plan should begin with 
verification of the presence of the required modules at all levels of the library environment. If 
certain modules are missing, the required programs must be developed and introduced to the 
library environment at the required level. 


Functional capabilitiee of SIMPO. The system is a software modeling system running on 
the BESM-6 computer, as outlined in Figure 2. The system includes the following components: 
Subject area models, experimental area generator, experimental plans, and the database. 


The component “subject area models” is represented by three library environment levels. 
The components “experimental area generator” and “experimental plans” are represented in the 
first level of the library environment. The database contains files to store data for all levels of 
the library environment, for the experimental area generator, to generate the output data of 
experiments, test examples, prepare experimental plan programs, modeling results, and input 
data for various experimental plans. 


All modules of the library environment were written in NEDIS and FORTRAN. They are 
represented using the “procedure” and “class” facilities of the NEDIS language. 


The library environment currently contains more than 40 class programs and some 70 
procedures. In each SIMPO session, the user must either describe (in NEDIS language) the 
program for an experimental plan or must use a prepared plan, gen y stored in a special file 
of tested experimental plans. 
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The system assignment is formulated using control cards of the NEDIS system, the 
“Dubna” monitor system and the DISPAK operating system. 


Experimental control data contain the following information: ————— 
probabilities of various types of fires, modeling step, as well as the step 

of combustion and — Sane ate ddichon of the Weceaion, 

plans and equipment, as as the type of mine worker shift and complicating factor 
development scenarios. , 


The system supports the creation of an experimental area by representing the entire object 
or some of its individual components in each experiment. The experimental area generator 
repens cae ge Ragen th ime each of which is designed to create 


the required number of copies of the mine subsystems, 











equipment, fire protection equipment and shifts of ns Gathede Latsetis to is Guanes 
assignment list. 











Placement of the generation process in a separate module is explained by the fact that 
n of the mine information model is not a task, since a mine is a complex 
cal system with many subsystems. For exam , one block might contain 5 to 20 
workings, each working consists of several branches, each branch incl 
(dozens to several hundred) of stations. 


Initialization of the modeling process, in addition to the usual start-up of the model for 


computation, also includes start-up of the environment generator, which and assigns 
experimental conditions (nature and specifics of combustion and scenario). 


Each run of a model is completed by entering the observed quantities on the corresponding 
histograms or in files, and by computation of the cost of the fire. In the next run, the fire 
protection equipment is always returned to its initial state, and all mine rescue workers are 


returned to their positions. 


Upon completion of the required number of runs, the modeling results are processed, the 
cost of fire protection is computed, and possible losses are calculated. If a nonstandard fire 
protection version is used, the economic effect is calculated. Experiments are completed by 


printing out a report. 


Preparation for the next experiment involves both changing of the placement of fire 
protection equipment, plus assignment of new values for combustion process parameters, as well 
as different SIMPO functioning modes. 


The output data of an experiment includes: Probability of the fire, cost of 
the fire protection version used, distribution of time when efforts were started, 
distribution of time of completion of extinguishing efforts, distribution of costs for both positive 


and negative outcomes, distribution of fires extinguished (not extinguished) according to causes, 
as well as types of extinguishing equipment used. 


The output data of a modeling session include the probability of extinguishing the fire for 
the basic (or nonbasic) fire protection version, costs of fire protection equipment for the basic or 
nonbasic version, costs of fires extinguished and not extinguished, and economic effectiveness of 
the various firc protection versions studied. 


In the version of SIMPO which has been developed, investigation of development and 
extinguishing of fires is supported for five types of workings, nine different combustion plans, 
seven extinguishing scenarios (depending on the type of equipment used), and one type of 
complicating factor (interruption of water supply). 


The total size of SIMPO is about 6,000 NEDIS language operators. The mean time of one 
experiment is 20-30 minutes for 700-1000 simulation program runs (fire versions), the cost of 
one experiment is 20 to 50 rubles. Costs for the same number of experimental fires in test 
areas would be hundreds of thousands of rubles. 


The system can be used as a software experimental area for computer testing of existi 
and prospective fire protection systems and equipment, new fire extinguishing methods an 
tactics, to search for optimal ep a for protection of mines from exogenous fires. The 
system can be used to evaluate basic fire protection versions for newly planned coal mines. 


206 





JO vA Ny gt cree Fanos J — — —4— 
as 
tabematie 2 = am om Naturally, the set of combustion plans will be 





in the future (for new types of wor 
be developed, and combined mine models 


The possibility of representing processes described by differential equations allows 
ee ee ee ee 


of the “experimental plan” component will increase the range of tasks 


ction as an expert system. The system can be used in this manner to solve problems of 
distribution of limited fire protection equipment within an entire region or in sections 
an individual mine considering the potential fire danger present. 


Finally, SIMPO can be used to study and evaluate fire extinguishing systems and 
equipment in other branches of the mining industry and at other objects. 
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a special interface module cr BIF OSh/IK-1)', 
developed Design Bureau for Automatic Control , The system 
includes a multichannel analog-digital converter, a multifunctional digital-analog element” *, a 
are : ya element‘, a timer, arbiter, RAM, type KS52.01 microprocessor from 
p set. 


This system forms a functionally complete set of object communications modules, which 
can be configured and expanded in accordance with the number of monitoring and control 





, 





controller. The loader controller system 
either an SM-4 or SM-1420 computer through the interface 
module, and also independently by means of its own microprocessor. The arbiters are used to 
organise bus transfers in the loader controller system. 





The al principles for organization of physical transfer and control of modules Pe 
determined by the characteristics of the IK~-1 interface, allowing, when necessary, 
connection cf new functional modules to the loader controller system, including * 

elements of the LIUS-2 MikroDAT system® °. 


This interface utilizes chronous signal exchange with acknowl t, unidirectional 
bus address lines and control lines and bidirectional data lines. The OSh/IK~-1 interface module 
supports the standard data transfer procedure from the common bus side and generates all 
signals required for data transfer with IK-1 modules. To convert the common bus signals, the 
interface module logically includes instruction and status registers, registers for IK-1 address, 
output to IK-1, input from IK-1, and an interrupt mask register. For the IK-1 modules, the 
interface module logically appears as a controller supporting generation of address and control 
signals on the IK-1 bus, controlling interrupts and bus access. In the mode of sequential 
polling of a group of IK-1 addresses, the interface module can use incremented addressing with 
automatic address modification after each polling cycle. 


Software implementation of transfer in the loader controller system driver also allows 
simple inclusion of sections supporting operation with new modules. 


The driver was developed to be compatible with standard OS RV special input-output 
device drivers, utilizing standard control structures and some of the operating system 
supplementary subrottines. Primary attention during development was given to standardiza- 
tion of logical and physical operations, request formats, and the method of configuring the 
driver for a specific loader controller system element configuration. 


When input-output operations are executed, the driver utilizes static and dynamic 
information stored in the system data structures. The data structure for the loader controller 
system driver were developed according to the system standards. Static information stored in 
the driver includes the module type code, address on IK-1 bus, interrupt level for an initiative 
module, IK-1 bus number, module number, as well as additional information specific for each 
module. For example, the RAM module includes the address field, the timer module includes 
the initial interrupt signal generation interval, etc. Dynamic information such as the current 
addresses of arrays, counters, channel numbers, etc., is generated by the driver as it processes a 
request for a transfer operation. The system data structures include one DCB (device control 
block) for each loader controller system and one UCB (device controller) and SCB (controller 
status) for each module. All modules included in the loader controller system have a single 
logical name KUxx in OS RV, where xx is the ordinal number of the module. Agreement 
between the ordinal number of the module and its type is established when the driver is 
included in the system. 


The Procedure for inclusion of a loader controller system driver in the operating system is 
executed in dialog mode and consists of the following stages: 


— Input of information on types, addresses and number of modules included in the loader 
controller system, and generation of the configuration description file KUPAR.MAC; 


— translation of the driver text and basic data structures together with the file 
KUPAR.MAC; 
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— instruction of the loader controller system driver — creation of the file KUDRV.TSK 
and KUDRV.STB; 


— loading of the driver. 


A command file in the system processor input language for indirect command files 
KUGEN.CMD) has been developed to execute these stages. The loader controller system 

ver is loadable, which must be considered in generating a specific operating system version 
within which it will function. The direct driver loading procedure can be executed during 
initial OS RV start up using an instruction in the start up command file. 


Modification of the loader controller system configuration (types, addresses or number of 
modules) requires modification of the driver by the procedure described above. 


The driver is constructed of standard sectiun: To start input-output operations, process 
interrupts caused by power supply failure, interrupts from modules, to process time-outs. 


A power failure interrupt is imitated upon system start up and when the driver is loaded. 
This allows this section to perform all actions involved in initializing the driver data structures 
and initial setting of modes in the modules. A interface module status check is performed, [K-1 
interrupts are disabled to eliminate false operations, the microprocessor is started and executes 
the false instruction to jump to address 0. 


The interrupt processing section recognizes the type and address of the module generating 
an interrupt request, and sets the corresponding interrupt masks. An intrasystem request to 
start the tasks attached to the interrupts of the module involved is then generated. 


All loader controller system modules operate with no wait states. This avoids processing 
of a time out when a transfer operation is performed, and the time out processing section in the 
driver consists only of an immediate return to the main program. 


Requests to start input-output operations are processed by special driver ~~~*‘ons for each 
module and each operation type. We should note that many requests dr ‘re actual 
execution of physical transfer operations with the module and can be ¢ 2 regardless of 
other requests. They include the operation of producing parameters of a  ‘e (type, address, 
interrupt level), shifting a module to “independent” status, in which all re,.csts to the module 
are blocked by software, reading of digital signal input-output element interrupt data, 
determination of the time parameters of the timer. 


The basic analog and digital input-outj ut operations include input-output of information 
for a sequential group of channels of a module and input-output according to an arbitrary list 
of channel numbers. The group of initiative operations supports configuration of the driver to 
operate with digital signal input-output elements, the timer and microprocessor in initiative 
mode. When an interrupt signal is generated by any of these modules, one or more tasks is 
started, performing the required interrupt processing operations. 


The driver supports the organization of cyclical start up of operations in the analog-digital 
multichannel converter and digital-analog multifunctional element at fixed time 
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intervals using the loader controller system timer, which can be programmed for any time 
interval from a few hundred microseconds to minutes and hours. The multichannel ana- 
log-digital converter supports cyclical polling of groups of channels at fixed addresses with 
sequential filling of a fixed-length data array. An application program must output a single 
request to execute a cyclical operation, indicating as a parameter the number of cles. 
Upon completion of the polling operation, the driver utilizes a standard, OS RV procedure to 
transfer information indicating normal completion of the operation to the program. The 
operation of cyclical output of signals to fixed digital-analog multifunctional element channels 
operating in digital-analog converter mode is performed similarly. When the digital-analog 
element is operating as an interpolater, repeated processing of an array of values of the function 
to be interpolated is supported, outputting signals at fixed time intervals. 


Software control of the arbiters is used to control modules on any bus. The driver 
supports programmed arbiter operation to organize communications among selected buses 
within a block. Transfer can be performed directly with the modules in direct bus access (bus 
capture) and time sharing modes with active elements (such as microprocessors) working on the 
bus. en a logical request is formed for data transfer with a module, it need not be located 
on any particular bus within the block. Verification of the physical address of the module on a 
specific bus within the block and organization of transfer with the module through the proper 
arbiters are performed within the driver using the same transfer algorithm. 


When a microprocessor is included in the loader controller system, some of the low-level 
load-mode monitoring and control functions can be performed using the microprocessor and 
RAM. This requires communications between the microprocessor and the SM-4 (or SM-1420) 
processor for mutual exchange of status signals and required actions. A certain RAM location 
is selected with an arbitrary but predetermined and fixed address, and used to store information 
on the microprocessor status. The distribution of specific bits of the location for coding of the 
various status signals is performed as the system is programmed and is arbitrary. The signals 
are generated by the microprocessor as the program is processed. 


Upon detection of certain logical conditions, module or RAM statuses, etc., the mi- 
croprocessor, by Tre a specific status word, can send an interrupt signal to the SM-4 
processor, starting a special system task. This task can in turn read the microprocessor status 
(i.e., the value stored in the RAM location allocated for storage of the status), analyze the 
situation and take the necessary action. The loader controller system driver, in turn, allows an 
OS RV task to generate an interrupt signal for the microprocessor to start a special program 
loaded in the RAM module. 


When operating as a part of the loader controller system, a RAM module can be used to 
store programs to be executed by the microprocessor as well as associated data — load tables, 
coefficients, module polling results. The volume of RAM and distribution of addresses are 
determined by the structural configuration of the loader controller system considering the 
availability of arbiters. Since communications between different IK-1 buses in the block are 
organized using the 15th bit of the address bus, the maximum RAM which can be used on a 
bus with an arbiter is 32 Kbytes. Exchange with a RAM module is performed by direct bus 
access or time sharing with the microprocessor, as determined by a special parameter set in the 
request for the read or write operation. , 
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The microprocessor can execute a special operation which writes an array of data into 
RAM and then starts the microprocessor. 


Let us study the of requests to start input-output operations requiring physical 
access to the modules in somewhat greater detail. The following initial assumptions were made 
in the development of these sections: 


— In the ini «! state, all interrupt levels to the IK-1 are masked, the masks are removed 
at the correspondin levels as requests for initiative operations for a module are processed; 


men prt the interrupt system on the common bus, the loader controller system is connectad at 
ev ’ 


— in the initial state, the interface module is programmed for operation with input-output 
devices, the mask blocking interrupts from the IK-1 and mask blocking requests for bus access 
are not set (BAB Const); 


— after execution of any transfer operation with input-output devices or RAM, the 
operating mode of the interface module is restored. 


The general procedure for a physical transfer with the modwes is standardized and consists 
of the following functional operations: 


— Programming of arbiters to establish communications with the internal IK-1 bus on 
which the module is installed; 


— swit of the processor to the sixth interrupt level (blocking interrupts from 
input-output ces); 


— of the interface module for the assigned operating mode — permitting 
incremental addressing, setting the interrupt mask, setting the transfer mode with input-output 
devices or RAM, etc. (selectively depending on the transfer conditions required for a specific 
module); 

— sending of the IK-1 module address for communications to the interface module; 


— reception or transmission of databytes (transfer of information with the module) with 
automatic channel address incrementing; 


— clearing of the arbiter (breaking of communications with the block bus); 
— restoration of the initial interface module mode; 
— processor interrupt enable. 


: 


Requests usually use two buffers: A buffer for the input-output of data codes and a 
containing control information (addresses of the channels polled), and therefore the 
transmission of information to or from memory utilizes the special operating 


i 
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subroutines CGTWRD, @PTWRD and eGTCWD. These subroutines are present in the 

system only in special cases. Therefore, for normal operation of the driver the texts 

these subroutines are contained in the main driver text, but they are compiled and included 

in the driver object module only if not present in the operating system. This condition is 

tested by the macroassembler by determining the values of the corresponding system global 
identifiers in the file RSXMC.MAC. 


The queue of requests to the module as an individual system device is used to resolve 
collisions gaees: Bnhong the same module is accessed by different tasks. However, this 
mechanism is cient for cases of simultaneous accessing of different modules, which is not 
permissible, since all transfers are performed through the interface module registers. To 
eliminate problems with such accesses, processor interrupts are disabled for the time required to 
execute a physical transfer instruction. 


Correctness of execution of these operations by the driver can be verified in the task which 
erates an input-output request by analyzing the operation completion code sent by the 
ver to the input-output status block. The values of completion codes correspond to the OS 

RV standards, and can be used in assembler programs as numerical or symbolic values. The 
major ones are as follows: 


-— IE.BAD — Error in request parameters or impermissible module type; 

— IE.IFC — impermissible operation code; 

— IE.PRI — violation of privileges; 

— IE.FLN — module transfer to “independent” mode; 

— IE.SPC — impermissible address of channel number list array; 

— IE.NST — task not founc in system catalog; 

— IE.NOD — no free dynamic RAM for creation of request processing element; 

— IE.CON — reattachment of task not permissible. 

The range of input-output function code values for the loader controller system driver and 
their mnemonics were selected so that they differ from the corresponding codes for standard 
input-output device drivers. When tasks are programmed in FORTRAN, octal codes are used, 
while macroassembler p can use mnemonic symbolic references. For this purpose, a. 
special module called KUFCN.MAC has been developed, in which the symbolic code and their 
correspon numerica! values are entered as global variables. After compiling the module 
KUFCN.OBJ can be included in the OS RV system library — SYSLIB.OLB, allowing 
computation of the values of symbolic variables corresponding to input-output function codes 
for the loader controller system in the task construction stage utilizing these cod~. 


As an example, we present several values and symbolic representation: input-output 
function codes: 
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— 10.AIG=16,000, — input of analog information with successive channel polling; 
— 10.AIL=16,001, — input of analog information using a list of channels; 
— I0.CAI=16,005, — cyclical analog-digital converter polling; 


— 10.A0G=17,000, — output of group analog signals to multifunctional digital-analog 
element — digital-analog converter; 


— 10. TIT=15,002, — attach task to timer interrupts; 

— IO. TTA-15,003, — release task from timer interrupts; 

— I0.WRM=17,406, — store array in RAM. 

In all, processing of 34 different types of input-output requests is supported in the driver. 


The limiting requirements for tasks operating with the loader controller system driver are 
related to the need to perform long, multiple-cycle accesses and store data in user buffers, 
change device operating modes, etc. Thus, output of a request to shift a module to 
“independent” mode is possible only in a privileged task. A task attached to interrupts by the 
microprocessor, timer or digital input-output element must be constructed as resident 
and must be stored in memory re it is started. Tasks starting cyclical operations in the 
analog-digital and digital-analog converter elements must have similar characteristics. In 
general, these limitations are not too rigid and help to improve the operational stability of the 

are. 


The effectiveness of the use of the loader controller system driver has been confirmed by 
its operation as a part of an agricultural machinery resource testing process controller, including 
for the new “Don-1500” high-productivity combines. 
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Manufacturing Quality Assurance Under The New Economic Conditions 
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[Article by V. S. Dubovik] 


[Text] A zonal scientific- practical conference on “technological manufacturing control systems 
and product quality in the light of the resolutions of the 27th CPSU congress” was held in 
Pensa 10-11 December 1987. It was organized by the Scientific Council On The Problem Of 
“Cybernetics” of the Ukrainian Academy of Sciences, the V. M. Glushkov Institute of 
Cy cs, Ukrainian Academy of Sciences, the National Scientific Research Institute of 
Standardization, USSR State Standards Commission, the Volga House of Scientific and 
Technical Propaganda, the Committee on Standardization, Quality and M , Ukrainian 
Scientific and Technical Society, and other organizations in order to discuss status of 
affairs, evaluate and share leading scientific and practical experience in the area of production 
management and product quality. 


The conference involved the participation of scientists and specialists, leaders of industrial 
enterprises and associations, technical testing department chiefs, product quality management 
service chiefs, | specialists from organizations and enterprises of Voronezh, Gorkiy, Kiev, 
Leningrad, Moscow, Penza, Sevastopol, Ulyanovsk and other cities. | 


the conference, the scientific director P. Ya. Kalita (Institute of Cybernetics, 
Ukrainian Academy of Sciences) noted that as enterprises in our country make the transition to 
operation with full self ing and cost accounting, as the law on state enterprises 
(associations) takes effect, d the period of continued perestroika, the problem of 
the effectiveness of operation of enterprises and organizations, improving product quality an 
competitiveness will move to the four. 


The report of V. I. Tobis (National Scientific Research Institute of Standards, USSR State 
Standards Commission) noted that improvement of product quality is most closely related to 
the results of functioning of the product Bor | management system. Analysis of the state of 
affairs with respect to .e operation of such systems in the ministries (departments), at 
enterprises and in organizations has shown that no essential improvement in product quality 
has resulted from their introduction. The institute is therefore now developing the basic 
concepts for product quality management under the new economic conditions. 


There was great interest in the reports of P. Ya. Kalita, demonstrating the need to 
improve product quality management systems at enterprises and in organizations, gunn. 
scientific- met ic and practical problems of implementation of structured goal- orien 
management m using the example of an organizational- technological decision- making 
system encouraging stability in quality formation processes (STK PRIROST- PK). Discussing 
problems of design and functioning in detail, the speaker conveniencly demonstrated the 
effectiveness of STK PRIROST- PK as a means for increasing product quality at various 
management levels. 
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Malanyuk *F B. F. Opara ——* Cybernetics, Ukratnian Academy of Sciences). 


The practical experience of applying STK PRIROST- PK to management of a fish canning 
enterprise was discussed by L. I. Velichko (“Atlantica” Fishing Industry Production 
Association, Sevastopol). 


The reports of V. S. Dubovika (Special Design Bureau MMS [expansion not given], 
Institute of Cybernetics, Ukrainian Academy of Sciences) and N. V. (Institute of 
Super- Hard Materials, Ukrainian Academy of Sciences) discussed an approach to practical 
problems of quality management of developments based on STK PRIROST- PK in a two- step 

design- experimental production” system, operating within the framework of an academic 
scientific- technical complex. 


M. L Kulagina (Central Scientific Research Institute of Wool Products, USSR Light 
Industry Ministry, Moscow) informed the participants of the purpose, composition and func- 
tioning sequence of the INZHENER production process operational control system, based on 
methods of situational analysis implemented on computers. 


The problems of production management to assure manufacture of products with the 


highest quality :atings were discussed in the reports of V. V. Lasebnaya and N. V. Stolyarenko 
(Institute of Cybernetics, Ukrainian Academy of Sciences). 


A. P. Lagoda (Institute of Cybernetics, Ukrainian Academy of Sciences) discussed an 
approach to improvement of product quality in machine building by development and im- 
provement of designs in the experimental production stage. 


The participants of the conference noted that the experience gained in the employment of 
product quality management systems at industrial enterprises has demonstrated the need for 
significant improvements in their effectiveness. This task is particularly pressing given the 
transformation of enterprises and organizations to full cost accounting and self financing, the 
introduction of state acceptance testing of products, and the affirmation of the 9000 series 
“Quality Assurance System” international standards, observation of which is an important 
factor in the improvement of competitiveness of domestic products on the world market. 


ne ae tnd tebesanine a product quali pe ee of ontgr : 
opment uction uct ity management systems have been changed in 
response to adoption of the USSR law oi state enterprises (associations); therefore, the 
enterprises themselves must activate the creation of effective product quality management 
systems, capable of achieving a radical improvement in product quality and increasing pro- 
duction effectiveness. At the same time, the enterprises are experiencing an acute need for 
improved scientific- ———— support, —* comp oo ons and the means 
necessary to create such management systems. concept of product quality management, 
developed by the National Scientific Research Institute of Standards, USSR State Standards 
Commission with the assistance of leading specialists from the ministries and departments, 
reflecting the specifics of the transformation of the economy to the new economic conditions, 
should help solve these problems. 
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Many scientific research institutes are working on the development of improvements to 
product quality management systems, the use of which can even now assure the implementation 
of a number of the international series 9000 standards and improve the quality of products 
produced and the technical- economic characteristics of enterprises. These include primarily 
developments related to planning of organizational- technological production and product 
quality management systems, based on STK PRIROST- PK — of Cybernetics, 
Ukrainian Academy of age as well as the INZHNER system (Central Scientific Research 
Institute of Wool Products, USSR Light Industry Ministry). 


In the exchange of opinions, the participants of the conference recommended that 
enterprises (associations) and organizations activate the creation of highly effective product 
quality management systems, basing them on economic management methods, corresponding to 
the new economic conditions. The creation of such systems should be oriented toward the 
internal series 9000 “quality assurance system” standards and should make broader use of 
leading scientific achievements and the practical experience which has been gained in the area 
of improving product quality management systems. 


The basic concepts of product quality management under the new economic conditions 
suggested by the National Scientific Research Institute of Standards, USSR State Standards 
Commission, and the developments related to the creation of STK PRIROST- PK and the 
INZHENER system were applauded. It was decided .hat development of work on planning of 
organizational- technological production and product quality ne oe systems and the 
development by the National Scientific Research Institute of Standards, USSR State Standards 
Commission, of methodological recommendations for organization of the work performed at 
product quality management organizations and services in the ministries (departments), 
organizations and enterprises should be continued, reflecting the specifics of this work under the 
new economic conditions. 
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Management of Data Processing Technology In Computer Centers and Computer Networks 


81440014 Kiev UPRAVLYAYUSHCHIYE SISTEMY I MASHINY in Russian No 3, May-Jun 
1988, pp 119-121 


[Article by B. N. Panshin] 


Text] The seminar “Problems Of Management Of Data Processing Techn At Computer 

ters And On Computer Networks,” organized by the Republic House of mical and 
Scientific-Technical Propaganda, Institute of Cybernetics imeni V. M. Lushkov, Ukrainian 
A of Sciences, and the exhibition of achievements of the Ukrainian National Economy, 
was held 2-3 September 1987 in Kiev. 


Following the tradition (this seminar has been held each year in September since 1978), 
the seminar analysed problems related to the creation, development and operation of 
mc ars cone aie te tod iad Meas Ge Gah ee ca 
technol at a computer center, in local and distributed computer networks. It was 
that under today’s conditions, these problems must be studied from the standpoint of the 
methodological concepts of the new information technology. 


The reports presented at the seminar were on the following main themes: 


— Methodology of planning and improvement of technological data processing systems; 


— development and introduction of new algorithms and software facilities for managing 
data processing technology; 


— development of facilities to support friendly interfaces for computer system and users. 


The report of Ye. M. Lavrishcheva (Special Design and Technological Bureau, Production 
Association, Institute of Cybernetics, an Academy of Sciences, Kiev), “Principle of 
technological preparation of development of data processing application programs” analyzed the 
major tasks in technological preparation of the development of application programs, concluding 
assurance of software package ease of use and quality, development of technological processes 
and lines based on technological and organizational support. To solve these problems, the 
author suggests and provides a foundation for the concept of metatecinology', allowing methods 
and facilities for the development of application programs required for the subject area to be 
represented as chains of actions by technological processes and lines, performed on a system of 
conceptual and technological objects. The structure of the elements of the metatechnology is 
presented as applicable to the class of TSOI [expansion not given] problems. 








‘Lavrishcheva, Ye. M. Osnovy tekhnologicheskoy vki razrabotki prikladnykh 
programm SOD (Principles of Technological Preparations For ment Of Data P 


System Application Programs). Kiev, 1987, 30 pp. (Preprint, Institute of Cybernetics imeni V. 
M. Glushkov, Ukrainian Academy of Sciences: — * 
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The report of Ye. B. Bibik, N. G. Varavina (Institute of Cybernetics, Ukrainian Academy 
of Sciences, Kiev), A. D. Savchenko (Special and T cal Bureau, Production 
Association, Institute of Cybernetics, an A of Sciences, Kiev), “Improvement of 
the organizational structure of a computer center.” discussed the activity ‘a computer center 
as a set of interrelated functions a hierarchical structure. The tool used to select the 

on of computer center subdivisions by the authors consisted of structural matrices 
and cluster analysis. The production structure of a computer center formulated as a result of 
these developments is presented’. 


The report of O. P. Kirilenko, —* Scientific Research Institute of the Organization 
of Production and Labor In Ferrous Kharkov), “Structural-functional model of the 
technological process of data p a pallid a 
process of information processing, the distinguishing features of which include: Approximation 
te — inclusion of 

Bes Re anning computations in servicing requests for information-computer operations; 
in the SD diana oh puoricuty daveanel Wale programs. 


The report of G. F. Yanykh, “Problems of creation of an automated computing process 
management system in a multimachine computer center,” (Central Scientific Research Institute 
of Automated Management Systems, Riga) was dedicated to specifics of managing the 
computing process in combined specialised computer systems. The speaker reported a 
for ch oppreg, Boy compu process developed at his institute. In the present stage, software 
facilities are devel to compose a weekly schedule for allocation of machine resources 
with a detailed of tasks and considering assigned schedules for producing computation 
results. 


The report of N. D. Moshkina, “A system for simulation of discrete-continuous processes” 
(Moscow ones and Physics Institute, Moscow) discussed an original simulation system 
which has been oped and is now in practical use, di cd by fs grat sped and wal 
developed linguistic facility; the system can simulate the vior of complex systems both in 
time and space; a single time scale is used to model both discrete and continuous processes; 
object modules are small (5-6 times smaller than for the widely known GPSS system). 


The report of A: A. Yemelyanov, “The status of DEMOS family operating systems,” 
tevdope Engineering and Physics Institute, Moscow) was dedicated to the analysis of the 
opment of oper systems based on the Unix. standard. The major advantages of such 
inclu Possibility of organizing interprocess communications channels; 

—— of hardware facilities allowing rapid creation of new dialog information systems; 
development of program The atin facilities; the ability to create new compiles (availability of 
compiler generators). briefly described commercial versions of Unix.-type 





*Sovershenstvovaniye organizatsionnoy struktury vychislitelnogo tsentra (Improvement Of The 

onal Structure Of A Computer Center). Ye. B. Bibik, N. B. Varavina, B. N. 
Panshin, and A. D. Savchenko. Kiev, 1987, 23 pp. (Preprint, Institute of Cybernetics imeni V. 
M. Glushkov, Ukrainian Academy of Sciences: 87-39). 
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operating systems now available: The DEMOS OS for the YeS and SM computers and several 
types of microcomputers. The RUBIN DBMS is available for use on the SM computers. 


The * of N. A. Gudsenko, of Planning Mobile Distributed DBMSs” 
(Institute of Cybernetics, Ukrainian Academy of Sciences, Kiev) was dedicated to practical 
testing of a technology for using the capabilities of the C language and the system library of the 
DEMOS OS to develop specific data management systems. The actual data in 
— 8 Se ee es (each set consists of a key and a record). The kernel 
of the system (i.e., the DBM library) can be transferred to any computer. e DBM can 
construct distributed DBMSs, the DBM being easy to modify for specific operating conditions. 
This software for data management can be easily and conveniently debugged under the 
a. of the DEMOS OS using the CDEB debugger, then can be transferred to computers of 
another type. 


Problems of creating systems for management of the computing process were also discussed 
in reports of V. A. Ubogov “Implementation of local ‘star’ type computer networks under OS 
RV and RAFOS” (Chelyabinsk), V. N. Grishchenko, V. I. Sumkin “Facilities for data 
transmission in organization management systems: (Institute of Cybernetics, Ukrainian 
Academy of Sciences, Kiev), A. R. Ilves, V. P. Pilipenko “Software-hardware and technological 
facilities of a remote information controller point” (Institute of Cybernetics, Ukrainian 
Academy of Sciences, Kiev), A. V. Sukhobokov “External task planner: Status and 
development prospects” (T t Polytechnical Institute, Tashkent), Ye. S. Trostin “Order, 
accounting and monitoring of terminal time in OS RV-type system” (Chelyabinsk), A. F. 
Snizhko “Modeling of data processing management at the main computer center, republic 
automated computer center, Ukrainian SSSR” (Main Scientific Research Computer Center, 
Ukrainian State Pl Commission), and V. A. Korolenko “Automation of planning at the 
computer center” (Minsk). 


An interesting report was presented by V. B. Dralyuk (Peddagagix Institute, Sverdlovsk), 
in which a classification was presented of the interfaces of various components in the computer 
process with a multiuser operating system, unified principles were formulated for implementing 
such interfaces including a detailed analysis and development as applicable to the YeS computer 
operating system. Based on these principles, a number of methods were discussed for dynamic 
support of the interface of programs with the operating system, allowing dynamic adjustment to 


specific operating system configurations’. 


During the discussion of these reports, it was noted that as computer systems become 
more complex (multimachine systems, computer networks), problems of managing the data 
processing technology are moving once more into the focus of many developments. The role of 
software and organizational facilities to track the computing process in increasing the 
effectiveness of computer use has once again, contrary to predictions (resulting from the 
massive use of personal computers) not decreased, but rather increased. Furthermore, the 
organizational level of a specific information technology may represent a eral quality 
characteristic of the degree of its sophistication. The increasing influence of programming 





‘Dralyuk, V. B. “Multitasking Methods Of Servicing Subscribers Of The ’Argus’ Dialogue 
System,” USiM, 1987, NO. 2, pp. 28-32. * * 
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technology on computer center or computer network operating technology was also noted, and 
the lack of comparative quantitative characteristics of different technologies for preparation of 
program products was mentioned. 


The speakers mentioned again the difficulties encountered in organizing computer center 
operations for large scientific research institutes. In the organizatio aspect, such a computer 
center is a supplementary subdivision, and thus not always a “favorite,” in spite of the fact 
that the intellectual potential of the computer center employees is , while their work in 
terms of its level of complexity, intellectual and physical effort is equal to that of the purely 
scientific subdivisions. “External” problems of the organization of computer center activity 
make the internal problems more difficult: An incomplete approach to utilisation of hardware, 
recording of failures, accoun for and planning of work with a shortage of almost all 
resources; “friendly” software (widely used | and compilers still at the level of the 60s, 
diagnostics oriented toward the programming professional). The solution of these problems is 
seen in the use of operating systems which, both when operating in dialogue mode and with 
text, can service all computer center users within the interconnected and separated 
technological lines (i.e., specific information technologies). 


In recent years, there has been a lag in the creation of facilities for automating the 
planning and management of the basic productive activity of various types of computer centers. 
Unfortunately, until recent times problems related to the computation of the necessary 
productivity of computer installations, selection of types and configurations of computers, 
composition of annual plans for provision of machine resources to users, monthly and weekly 
plan schedules for allocation of machine time, oe for the use of machine resources and 
user billing were insufficiently supported by scientific-methodological developments and 
frequently were solved in a disconnected manner, with no unified methodological basis. Many 
functions performed by computer center personnel involved in planning the use of machine time 
and organizing the computing process are not automated. 


Many tasks have assigned times for arrival of information and output of results to users. 
The annual planning cycle is performed over 13 months. Each year the developers of the 
annual plan include new tasks, and users make changes to previous tasks. Changes to tasks 
require restructuring of the technology used to perform them; configuration of required 
programs from individual modules. The changes made are frequently not documents, due to 
time shortages. 


Many task algorithms require the direct participation of specialists comparable in their 
qualifications to system developers, with great knowledge in the area of the processes they 
control, organization of application programs and data, and the technology of task performance. 
The sequence of program start up and communications between programs are described in the 
huge volume of documentation at the center, too great to be comprehended. Even today, 
computer centers must have operatir= subdivisions specializing in the performance of the tasks 
of each subsystem individually. 


Position is made more difficult by the fact that the subsystems in use do not have a 
common database, monitor programs to control dialogue, all of which were developed using 
different programming languages and in many cases function under different operating systems. 
Situations frequently arise in which there is a shortage of machine time. It is not always clear 
agrege available machine resources are efficiently used, or whether the personnel are at fault 
in the situation. 
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As computer centers are converted to self financing, it will be impossible to have a reserve 
of computer power, since, first of all, this would not provide the st loading 
computers and, secondly, the economic effectiveness characteristics of the subsystem would 


drop, and furthermore the cost of information-computer services ring g cge Brome. 
protests from subsystem users. Therefore, the accuracy of computation of the efficiency 


automated management systems must be improved, along with the existing system for 
organizing the computing process. 

Problems of predi the time required to perform automated t system tasks 
in multi need more work, particularly tasks which have not yet been 
experimen operated. Furthermore, the time required wee ee 
multiprogramming mode depends on the mixture of tasks simultaneously performed, 
which cannot be predicted in advance. The technology of task ce in some subsystems 
continues to be nonautomated. 


During the discussion of problems relating to improvement of computer center operating 
technology, the two most pressing tasks for improvement of information technology 


management systems were revealed: 


— Improving the level of organization of data p technology, including selection of 
criteria for evaluating optimal organizational conditions of information technology (in each 
specific form) and selection of a characteristic to evaluate its organizational level; 


— selection of effective versions for utilization of elements of the new information 


technology transmitting, input and display facilities), incl organisation of the 
computing on The criterion here is comparability of results and the costs of the new 


equipment. 


Analysis of the capabilities for using new information technology must consider the 
functionality of a specific device and practical suitability for use (facility of use, ease of loading, 


ease of repair, etc.). 


It was noted that information technology management systems should distinguish among 
cal, economic and organizational — ry The criteria of economic t 
are related to costs, and can therefore be considered management of the distri 
tseaster Gnd eonmnibption of costs (charectetiding the efieeliveness of the entite tedinclegtent 
system). Organisational management, like economic management, is superimposed over 
cal management, i.e., creates, organizes and improves it. 


Improvement of the organizational and economic levels as applicable to information 
technology occurs in the direction of so-called external management‘ of multimachine systems 
and computer networks, in contrast to internal management, performed by the computer 


operating system facilities. 








‘Danshin, B. N. “Problems Of Creating And Developing Regional Computer Center Supervisory 
Services.” USiM, 1987, No. 1, pp. 14-17. 








— ogg rapgchent egy alo hag tes ret ec tagtooga thump es 4 

ting process must involve complete automation of vidual 

voggeps ers Rg gees pose pnd pag ec Rages 
system, satisfying the functional, economic, organisation 

ts. This also creates the necessary conditions for introduction of the 

organizational forms of utilisation of computer equipment (personalisation of 

computations, shared use of expensive hardware, etc.). 








provemen technology management systems is not a single action, but 
rather a complex, cyclically develo , in which practical activity must be alternated 
with theoretical summarisation of results obtained in order to determine the directions for 


future studies. 


GaMntS cemphine ——— Do oh that during the course of the 

significantly speeding the intsodavtiin, of thine dovdipauials te ye a de eat 
can , 

rapid determination of their strong and weak points. 


The next session of the seminar is pianned for September of 1988. 





Development of Dialogue Task-Oriented Systems 


81440014 Kiev UPRAVLYAYUSHCHIYE SISTEMY I MASHINY in Russian No 3, May-Jun 
1988, pp. 122- 123 


[Article by N. P. Trifonov and V. Sh. Kaufman] 


] One di Fe cine aiaaienth — — 
the future, is the presence of a certain metaalgori — seg Pl cryos technological task 
‘lis Bask tho sostiananal espero of the Pye ype 


the system is implemented — on a personal computer or a terminal attached to a powerful 
computer system. 


————— ph here reviewed reocognised the difficulties in 
cst Neh ote Progen. Pot br Age Gareicimnaat of tha clans of venentie (et ecudaptnall 
nS, or oe lack of unified terminology, the acceleration of the rate of 

on of computer equi t and the resultant obsolescence of familiar ways of 


sr the organisation Tans, ot tobe on computers. However, the coming 
advent of -generation software justifies the goal of the authors — to cast off the 
accumulated system programming baggage. 


This monograph can be arbitrarily divided into two parts. In the first four chapters, the 

gained in developing software is systematized, while chapters 5 and 6 are dedicated 

| rool i, rs’ own development — an instrumented large-module programming system called 
D 











ome presents an overall view of the subject studies — task-oriented systems. A 
— tonite of task-oriented is presented and trends in their development are 
senubling &, Uiak-ctleaton eotadin ‘o t pment of task-oriented systems. The problem of 
ting a task-oriented system is studied and the task of dialogue task-oriented 
— fe cubed waitin, (lo \achder povtdan, the complexity of which has still not been fully 


recognised by most developers. 


ec eh ging rar llae aE Mer: Fac gig ec gges Mi programming itself 
(with its present model of the “limited” lifecycle of a —* oF een roduct) to eo 
prefabricated planning of task-oriented systems by aggregation and subsequent 
ol edladant aceb. — cathe cdane teh Gad eclioael cecbaaie wal ts eensieasien on 

the basis of production systems or cero pers conclusion processors, so that the major 
task in a specific task-o will be reduced to development of a 
task-oriented su — model and e⸗ ent of its correctness (completeness and 





Chapter two discusses methods of increasing the reliability of task-oriented systems. In 
addition to traditional methods of testing and verification of programs, approaches for 
est the correctness of a subject-area model in various task-oriented systems are 
studied. ce has shown that these approaches combine mechanisms of testing and 





'Perevoschikova, O. L., Yushchenko, Ye. L. Sistemy dialogovogo resheniya sadach na EVM 
(Dialogue Problem-Solving Computer Systems). Kiev, Nauk. jt Press, 1986, 264 pp. 








verification of programs, although approaches to task-oriented system quality evaluation based 
on of subject-area model correctness have not yet been produced. In the opinion of the 
, it has now “become clear that we need to verify not programs, but rather subject-area 
models or know bases, in other words, the dynamic software product. For p in 
, the most direct and rapid dialectic relationship between theory and practice in all areas 
of human activity is now characteristic, and it would be quite incorrect to call individual trends 
in the development of the theory impractical.” 


Chapter three of the m aph presents an evaluation of task-oriented system at 
technologies. The authors have —8 their definition of workability from the 


dictionary edited by I. I. Artobolevskiy, “... agreement of a product with the requirements of 
an economic technology for its manufacture,” and use it to evaluate the workability of a 
software product, as achieved in some domestic instrumented technological complexes such as 
PROYeKT, RTK, TKP, APROP, ARIUS, ALTOP, MARS, YaUZA-6, TEMP and others. 
The authors note that in order to achieve the desired level of workability “... the distance from 
the separateness of present methods used to formalize individual semantic aspects of the 

and the community of the dynamic model of the lifecycle software must be overcome 
to construct an abstract software model considering the multiplicity of levels in the processes of 
planning and use of software. 


The product of some module ans systems, among which the authors include 

PRIZ, DILOS, ARPOS, VOPROS-OTVET-2, A-STATE, VIKAR, VILNYuS and DISUPPP, 

in quite workable. These products are task-oriented systems with various types of subject-area 

pyran differing both in their semantic power and in the methods of planning and organization 
computation. 


Chapter four of the monograph inv tes approaches to standardization of , 
accumulated in some individual areas: amming , super linguistic “processor 
environment (i.e., methods of system implementation), database management, remote 
processing in computer networks. The authors note correctly that the role of standardization in 

differs essentially from “... the role and position of standardization in other areas 
of human activity, such as in machine building. In programming, standardization serves the 
theoretical synthesis of scientific knowledge — a process directed toward unification and 
interconnection of previously separate disciplines or accumulated data, composing factual 
materials within the framework of a certain scientific discipline ... As a result, the 
contradiction between the separate, separated facts, and the common, new principles and laws, 
synthetically combining these facts, is resolved.” 


The results of study and systematization of extensive factual material accumulated in the 
process of unification and standardization in programming are used by the authors to perform a 
comparative analysis of OS YeS monitors. Among the more than 30 available, 17 remote 
monitors were selected, the common portrait of which rather completely reflects the entire 
spectrum of problems involved in the maintenance and debugging of software in the OS YeS 
environment. Among the remote monitors discussed are both the standard remote monitors 
SRV, DISP, DUVZ, as well as individually developed systems PRIMUS, JACK, FOKUS, the 
CAMA-dialog system, VEKTOR, DESNA, etc. 





The remote monitors were compared as to their functional characteristics and computer 
resource management dynamic factors. These factors result from the architectural 
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cs of the monitors. Tables of functional characteristics of the monitors are presented, 
poh ap to their certification for satisfaction of the needs of three groups of users: Novices, 
application and programmers. Users are divided into these groups not based on their 


knowledge level, a ee ee 
interaction with the remote monitors 

same, She core remote monitors is not performed in terms of subjective OS YeS 
software de , but rather on the basis of objective numerical 
monitor Thee m — — reflect the workability of the remote monitor 


products, which is significantly inferlor to the instrumental-technological systems. 


Chapter five analyses dialogue path systems — products of the DISUPPP instrumental 
system, generated by assigning two-level subject area graphic models. The specifics of the path 
systems include the support of single-step dialogue computations based on the subject-area 
model, pe ee agg hg Fl gage corsage laa seg me nag restart and 
interrupt “ype A pe , generating information on the status of 
computation and modifying — > er ey ve A single information base is used to 
support multistep computation, reflecting the sequence of system path states. 


Path systems embody the most progressive methods of problem solving: Dynamic 
planning two-level graphic subject-area models, organization of iterational multistep 
computations on coprograms, management and segmentation of a single information base, 
constant naming of segments and associative data retrieval based upon them. 


Chapter six of the monograph describes the process of generating a path system in 
DISUPPP: From description of the subject-area model in the eave Re egg Me ery to 
modularization of path system components and establishment of subject-area re Wp ses correctness 
(including —* of iterational computations). 


The complexity and size of DISUPPP can be described by an anecdote — 22 en 
ee cone oo Skee tae To determine the most effective rule for mod on 
on of modules into path systems, two generation systems were studied: With 

Ay! 8X Pe pe Sues ha te * It was found at with external > edbbens, ata.) ia 
over use ous OS YeS processing programs (compilers, editors, etc.) did 
not influence the relationship between subject-area model pen vt machine time 


expenditure for generation of path systems. 


The great workability of path system is explained by the successful combination of 
advanced subject-area model formalization methods and the huge potential of standard 
computation support facilities in modern operating environments, clearly underestimated by 
many developers. 


This monograph summarizes the tremendous experience in development of task-oriented 
— Many dozens of systems are named, methods of their implementation are described 

and systematized. One could debate the completeness of the systematization, but the 
contribution of the authors to recognition of the most important system programming tasks 
related to implementation of task-oriented systems and transformation of traditional statements 
of these problems in a new light is beyond doubt. 


The monograph will doubtless be useful to a broad range of computer software developers. 
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Problems of Development of Information Systems 


81440014 Kiev UPRAVLYAYUSHCHIYE SISTEMY I MASHINY in Russian No 3, May-Jun 
1988, pp. 123- 125 


[Article by M. R. Kogalovskiy] 


‘Shay For more than two decades, database technology has occupied a firm position as the 
of creation of modern effective information systems. In the initial of its 
development, in the 1960’s, new approaches to data ee were simply form , the 
first attempts were made to create commercial DBMS. the 1970’s, thanks to the active 
research in the area of data models and system architectures, database theory began intensive 
development, experimental work was undertaken in the area of database planning methodology 


rogramming 
the development of smart database systems and the creation of systems of a ae ee — expert 
databases. Database technology has grown into an independent and rapidly developing branch 


of information science. 


In recent years, many scientific and technical works have been published by both Soviet 
and foreign authors on this problem. However, the bookshelf of the specialist is still not too 
rich in methodologic publications containing serious analysis of the status and prospects for 
development of this area, systematizing the problem of planning, development, introduction and 
utilization of large systems of this class and, in particular, the methodologic aspects of the 
industrial technology for development of various systems of this type. 


In this respect, the publication of the new monograph! of G. I. Fursin, a specialist known 
primarily for his work in the area of programming tools and industrialization of the 
development of large database systems for automated management systems, the preparation of 
industry-wide documents regulating this type of activity, is doubtless and event of great 
interest. 


This small book (about 10 printed sheets) with its broad name was greeted at first with 
some skepticism. However, the very first pages the reader becomes convenience of the 
seriousness of the authors intentions and the firm foundation of his arguments. The range of 
problems analyzed in this book is very broad — the status and prospects of development of 
information systems, problems of improving their intelligence, optimization of planning, 
industrial development technology. 


Chapter one starts (in accordance with the rules of good taste) with an introduction of the 
basic concepts which will be used in the book and their definitions, presenting the concepts of 
multilevel information system architecture. This material, vital to the subsequent presentation, 
is presented quite clearly and accurately. We note only the absence of references to the basic 
esi oT SPARC (1975), in which the architectural approach here analyzed was first 

rmulated. 





‘Fursin, G.I. Teoriya i praktika sozdaniya bankov dannykh (Theory and Practice of Database 
Creation). Kiev, Vishch. shk. Press, 1987, 192 pp. 
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The material of chapter one is basically review material. Its purpose is to provide the 
reader with a general orientation in the subject area to be analyzed. Thus, a classification of 
information systems from various standpoints is presented, helping to understand the reasons 
for the variety of their functions gps vray den wecogee gmt the spectrum of possible areas 
of application. A separate section is cated to problems of increasing the intellectual level of 
information systems, their relationship with expert systems and knowledge base systems. 
Finally, important problems related to the development of information systems based on 
database technology, called databanks, are briefly analyzed. Since the material is presented 
from the architectural standpoint, the author intentionally refers t o the subheadings as “Three 
levels — three groups of problems.” 


Chapter two, a brief chapter, is dedicated to analyzing the basic aspects of conceptual 
modeling and requirements placed on tools for its implementation. Conceptual modeling is 
studied not only as an important trend in research and development, but also as a specific form 
of activity in the process of creating an information system. Concepts of conceptual modeling, 
as we know, have been formulated as a result of computation in information system 
architecture at the so-called conceptual level, first suggested in the report ANSI/X3/SPARC 
mentioned above. In recent years, conceptual modeling has been actively developed due to the 

tion of the commonalty of its role in database technology, programming languages and 


cial intelligence. 


This chapter has a special place in this book. Based on recognition theory and the 
dialectic method, the author has found a conveniencing and natural interpretation of approaches 
and principles which make up the basis of conceptual modeling. In our opinion, this discovery 
by the author is of fundamental significance. 


Chapter three, the longest in the book, presents a detailed discussion of a semantic data 
model developed by the author and his colleagues, intended for conceptual modeling purposes. 
In spite of the somewhat old-fashioned name — KOMOD, the model is quite modern as to the 
ideas upon which it is based and well developed as to its functional capabilities. Unfortunately, 
the most positive attitude toward this book cannot overcome the impression of dissatisfaction 
with the last few sections of this chapter. The few plan solutions related to experimental 
implementation of this model presented in these sections are somewhat unconvincing and 
architecturally illogical, and there are terminological errors. 


The material in chapter four is quite interesting and presents fresh ideas. The authors 
demonstrates here just how the methods of multicriterion optimization developed at the 
Institute of Cybernetics, Ukrainian Academy of Sciences, can be applied to database planning. 
In the mathematical model suggested, he takes as his basis certain ideas related to the analytic 
estimates of database characteristics presented in the well-known monograph of T. Tiori and D. 
Fray, Proyektirovaniye struktur baz dannykh (Planning of Database Structures). Moscow, Mir 
Press, 1985. The approach developed by the author is implemented in his plan for 
ALTERNATIVA, the main concepts of which are also discussed in this chapter. 


The elements of the novelty here include both the initial statement of the problem and the 
— to use a known mathematical apparatus within the framework of a new sphere of 
application. 


Chapter five, the last chapter in the book, dedicated to problems of industrialization of 
information system planning, is very important. On the example of a real database, included in 
a construction automated management system, the basic methodological developments of large 
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informatio: systems are studied, based on the conceptual modeling facilities and multicritericn 
optimization techniques from Chapter four. The characteristic features of large databases used 
within enterprise automated management systems are discussed, as 

capabilities of the software systems used to create and 

plans for their development and assurance of functioning by the 


The book also contains appendices presenting the strict specifications of 
linguistic facilities used in the KOMOD data model and sample plan documents for t 
databases of Chapter five, as well as a conclusion section which presents a brief review of the 
most important trends in database research and development. 


In spite of the brevity of the analysis of a number of problems, due to the limited length 
of the book, a few terminological errors and omissions in the bibliography, this monograph is a 
definite success for the author. 


The work reflects the latest achievements in database theory, summarising the practical 
experience of their development. A significant portion of the work consists of a discussion of 
the results of the authors own research, containing a number of original ideas and 
nontraditional approaches. 


In our opinion, the book is doubtless useful, both for beginners and for experienced 
specialists. 
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— calculation of full labor consumption standards (figure). 
The set of calculations involved in the technological labor consumption standards consists 


of three <:odules: The first determines the standards for labor consumption per unit of product, 
the second calculates the volume of product in standard hours, the third generates labor 


consumption reduction assignments for the enterprise 
— gp ey et ae labor consumption included: a 


The following calculations are performed to obtain the required information: 


— The specific share of technically well founded standards (TOH) in the total volume of 
labor consumption 


T 
om > - 100, 
is the labor consumption various shops in standard hours as of 
Toca: of tn penn aie fe LS as labor consumption of the product with 
respect to technically well 
— the level of technological equipment: 
on He 


where II, is the quantity of technological equipment per product in the shop; Il, is the number 
of parts and assembly units in the shop per product; 


— the technical level of production of the product in each shop (d) is calculated in 
arbitrary units, using the industry-standard methods. 
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The calculated labor consumption (T,) is determined by the following equation: 


Tp = Te{! — Kg (I! — K,)]. 
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The final value of the standard decrease in labor consumption includes a correction of 
the degree of achievement of the standard level of the number of supplementary 
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The DISFONT eystem requires a YeS series (1069) computer, a type YeS7066 or 7927-01 
alphanumeric display, a tape drive, printer, and at 25 cylinders of type 5061 disk storage. 


The were written in PL and assembler. The programs run under OS Ye, 
version 4.1 later (MFT or MV). 


The DISFONT system is standard for enterprises under the Ministry of Communications 
equipment. The economic effect from its introduction at one enterprise is about 400,000 rubies. 
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Problems of and ting fires in 
ns nate a en 2 cede see effective systems and 
fire protection equipment, as as optimal strategies for their application. 





















The existing experimental base cannot provide the required volume of field testing, 
recreate the picture of the phe Ry of 
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The following trends have been developed in recent years in domestic computer simulation 
practice: 


— Creation of universal simulation systems’~*, 
— development of systems for simulation of formalised objects® ¢. 
— development of task-oriented simulation systems* ” °. 





simulating the processes of development, 
nt pen —— 
due to the external causes), considering the cost of fire protection 












— selection of a basic programming system. 





The capabilities of the NEDIS system allow conversion of 
“aw 
by many users. 


The methods and of structured used in the 
: — programming’ were widely 


The system development process involved all the traditional stages of creation of modern 
software systems”. 


In the requirements analysis stage, the following problems were addressed: 
— Determination of the set of tasks to be performed by the system; 
199 








In order to describe all subsystems in a mine and all fire extinguishing processes, it was 
necessary to develop new simulation modes. 





Structure and format of the output data in SIMPO were determined on the basis of the 
system users’ requirements. 


The system planning stage begins with the problem of specializing the basic programming 


Adaptation of the NEDIS system to problems of estimation of the effectiveness of fire 
protection strategies, systems and equipment was based on the use of the mechanism of library 
entries and returns (library environment)’. 

the 





The specific usage conditions of the library entries and returns 
description of the portion of the program, called the ; insert is always 
executed in the context of the corresponding library entries and returns. 

The of inserts permissible in the NEDIS allows the composition of the 
li environment to be expanded, and permits the of a multilevel library 
environment structure. The higher level of the library environment is accessible to a broader 
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A modeling session consists of the following stages: 
— Input of modeling session initial data; 


- generation of the object to be studied (experimental area); 


— initialization of the modeling process (generation of external actions); 
— running of simulation program and measurement of output data; 


— completion of the run; 
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— processing and output of results from the experiment; 


— preparation for the next experiment; 
— completion of modeling session. 








waite 


cactscue wEANC | 


epeorepeuwen 














j 





2) Caeume eacaepaementea 


























elie: 
: 

















ow 


allt ab 


i 











sil 











ii 


Ht 


Palak 











ri} 












iin 


He 





—1 


ab 















St ie 

aa 
7 tt Le 
i 

mt “HL He 

















j 


at° FP 





li wasepapes 


ste sein sss Ss Sn bcc ic nt Sls 





ceevteunm HEAHC 





Sf 


























i | 
at Eo 
1 UO ante 


J 















































The system assignment is formulated using control cards of the NEDIS system, the 























“Dubna” monitor system and the DISPAK operating system. 








The output data of an experiment includes: — 

the fire protection version used, distribution of time when efforts were 

sud saute ebapen, Eiinelics TGR teal lack Calman counties canomn, 
negative outcomes, extinguished extinguished) according to causes, 

as well as types of extinguishing equipment used. 


The output data of a modeling session include the probability of extinguishing the fire for 
the basic (or nonbasic) fire protection version, costs of fire protection equipment for the basic 
not 


In the version of SIMPO Se eS ee See, Meee S Coane sat 
extinguishing of fires is supported for five types of workings, nine t 

seven extinguishing scenarios (depending on the type of equipment used), and one type of 
complicating factor (interruption of water supply). 


The total size of SIMPO is about 6,000 NEDIS language 
experiment is 20-30 minutes for 700-1000 simulation program 
one experiment is 20 to 50 rubles. Costs for the same number 
areas would be hundreds of thousands of rubles. 








f 

fil 
bdr 
fils 


} 
t 
if 





i 
i 


al dstcbuton of limited fire protection oquipment within an eatire region orn sections 
individual mine considering the potential fire danger present. 


Finally, SIMPO can be used to study and evaluate fire extinguishing systems and 
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Software implementation of transfer in the loader 
simple inclusion of sections supporting operation with new modules. 
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operating system is 


The procedure for inclusion of a loader controller system driver in the 
executed in dialog mode and consists of the following stages: 


— Input of information on types, addresses and number of modules included in the loader 
controller system, and generation of the configuration description file KUPAR.MAC; 








together with the file 
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— translation of the driver text and basic data structures 


KUPAR.MAC; 








ver loading 


in 
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considered 
The direct 
start up using an instruction in the start up command file. 
Modification of the loader controller system configuration (t addresses or number of 
modules) requires modification of the driver by the procedure described above. 


— instruction of the loader controller system driver — creation of the file KUDRV.TSK 
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special operation which writes an array of data into 
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Let us study the of requests to start input-output operations requiring physical 
th pone prey ty The following initial assumptions were made 
in the development of these sections: 


— In the initial state, all interrupt levels to the IK-1 are masked, the masks are removed 
at the corresponding levels as requests for initiative operations for a module are processed; 


interrupt system on the common bus, the loader controller system is connected at 


the 
— in the initial state, the interface module is programmed for operation with input-output 
devices, the mask blocking interrupts from the IK-1 and mask blocking requests for bus access 
are not set (BAB Const); 


— after execution of any transfer operation with input-output devices or RAM, the 
operating mode of the interface module is restored. 


The general procedure for a physical transfer with the modules is standardised and consists 
of the following functional operations: 


ee — 
which the module is : 


— of the processor to the sixth interrupt level (blocking interrupts from 
— 






ey ———— 
incremental addressing, eee io ee transfer mode with input-output 
rion ot RAM, we (nacrdy dpeding transfer conditions required for « specific 
— sending of the IK-1 module address for communications to the interface module; 


SS Sr cee Cee OS SENS SOND Ce Santee) a 
automatic address incrementing; 


— clearing of the arbiter (breaking of communications with the block bus); 
— restoration of the initial interface module mode; 














ii 


— IE.BAD — Error in request parameters or impermissible module type; 


— IE.IFC — impermissible operation code; 
— IE.PRI — violation of privileges; 





— IE.FLN — module transfer to “independent” mode; 





— IE.SPC — impermissible address of channel number list array; 
— IE.NST — task not found in system catalog; 


— IE.NOD — no free dynamic RAM for creation of request processing element; 


— IE.CON — reattachment of task not permissible. 
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— 10.AIG=16,000, — input of analog information with successive channel polling; 
— 10.AIL=16,001, — input of analog information using a list of channels; 
— 10.CAI=16,005, — cyclical analog-digital converter polling; 


— 10.AO0G=17 — of multifunctional 
0.AOG=11,00, — output of group analog signals to digital-analog 


— 10.TIT=15,002, — attach task to timer interrupts; 

— 10.TTA-15,003, — release task from timer interrupts; 

— 10.WRM=17,406, — store array in RAM. 

In all, processing of 34 different types of input-output requests is supported in the driver. 
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Management of Data Processing Technology In Computer Centers and Computer Networks 
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1988, pp 119-121 


[Article by B. N. Panshin] 





at a computer center, in local and distributed computer networks. ; cae 
that er today’s conditions, these problems must be studied from the standpoint of the 
methodological concepts of the new information technology. 


The reports presented at the seminar were on the following main themes: 


— Methodology of planning and improvement of technological data processing systems; 


— development and introduction of new algorithms and software facilities for managing 
data processing technology; 


— development of facilities to support friendly interfaces for computer system and users. 


The report of Ye. M. Lavrishcheva (S Design and Technological Bureau, Production 
Association, Institute of ror of Sciences, Kiev), , Principle of 











‘Lavrishcheva, Ye. M. Osnovy tekhnologicheskoy rasrabotki prikladnykh 
programm ples of Technological Preparations For Of Data ane 
System Application Programs). nae 1987, 30 2 Institute of Cybernetics imeni V. 
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— ane sestat ae eked Gaka* dread Gn clits dc ted atin 
as a set of interrelated functions forming a hierarchical structure. The tool used to select the 
specialisation of computer center subdivisions by the authors consisted of structural matrices 
and cluster analysis. The production structure of a computer center formulated as a result of 


these developments is presented’. 








The report of G. F. Yanykh, “Problems of creation of an automated computing process 

system in a multimachine computer center,” (Central Scientific Research Institute 

Management Systems, Riga) was dedicsted to specifics of managing the 
specialised computer . 








The report of N. D. Moshkina, “A system for simulation of discrete-continuous processes” 


(Moscow — *5 ee Moscow) discussed an simulation system 
Vac bes be sem the by its speed and well 
a ae 5 a wig Be aun Gs Benine vior of systems both in 





The report of A: A. Yemelyanov, “The status of DEMOS family 
mee Sarees ane 
t of gg mete pede dy Bag 

systems ty of organising 
es See: ee 
development of program debugging 
compiler generators). The speaker described 








organisatsionnoy struktury ange” eae, Cuoeurenans CE Tee 
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The speakers mentioned again the difficulties encountered in 
operations for large scientific research institutes. In the i 
center is a supplementary subdivision, and thus not always a “ 
that the intellectual potential of the computer center employees is 
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productivity of computer installations, selection of types and configurations of computers, 
composition of annual plans for provision of machine resources to users, monthly and weekly 
plan schedules for allocation of machine time, for the use of machine resources and 
user billing were insufficiently supported by scien developments and 
frequently were solved in a disconnected manner, with no unified basis. Many 
functions performed by computer center personnel involved in planning the use of machine time 


and organizing the computing process are not automated. 
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The sequence of program start up and communications between programs are described in the 
huge volume of documentation at the center, too great to be comprehended. Even today, 
computer centers must have operating subdivisions 


of each subsystem individually. 
Position is made more difficult by the fact 
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The next session of the seminar is planned for September of 1988. 
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in a new light is beyond doubt. 


The monograph will doubtless be useful to a broad range of computer software developers. 
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